基于通用知识的软件设计安全性评估

ISCAS OpenIR

	基于通用知识的软件设计安全性评估
Alternative Title	Knowledge-Based Secur ity Evaluation in Software Design
	戚荣波; 杜晶; 杨叶
	2013
Source	计算机系统应用
ISSN	1003-3254
Issue	11 Pages:1-6,80
English Abstract	安全性作为软件系统的重要属性，越来越受到人们的重视。在软件开发的早期对安全性进行评估，对软件的质量控制和成本控制有着重要意义。当前的软件安全性评估主要依靠专家评审，结果的客观性及准确性常常受到专家主观意见的影响。通过使用通用知识作为评估依据，提出一种可以对 UML 顺序图形式的软件设计文档进行自动化分析的方法，可以发现软件设计中潜在的安全性漏洞。该方法可以减少结果中的主观性，同时，通过基于该方法的辅助工具的使用，可以大大提高评估效率。 As an important property of the software system, software security has drawn more and more attention. Security evaluation in the early phase of the software development is important to software quality and cost control. Current expert-based review and inspection methods can be error-prone and subjective. In this paper, we have proposed a knowledge-based security evaluation approach which can detect vulnerabilities in the UML sequence diagrams. With common knowledge as the evaluation reference, we can reduce the subjectivity in the result. We also have developed a support tool which can automatically perform most of the work in the method and improve the efficiency.
Keyword	软件安全性通用知识攻击模式软件安全性评估 Uml顺序图 Software Security Common Knowledge Attack Pattern Software Security Evaluation Uml Sequence Diagram
Department	中国科学院软件研究所,北京,100190
Language	中文
Content Type	期刊论文
URI	http://ir.iscas.ac.cn/handle/311060/17001
Collection	中国科学院软件研究所
Recommended Citation GB/T 7714	戚荣波,杜晶,杨叶. 基于通用知识的软件设计安全性评估[J]. 计算机系统应用,2013(11):1-6,80.
APA	戚荣波,杜晶,&杨叶.(2013).基于通用知识的软件设计安全性评估.计算机系统应用(11),1-6,80.
MLA	戚荣波,et al."基于通用知识的软件设计安全性评估".计算机系统应用 .11(2013):1-6,80.

Files in This Item:
There are no files associated with this item.

If you have any objections to this item, please fill out the form below and the administrator will contact you as soon as possible.
Content:
Email：	*
Institution:
Verification Code:	Refresh

Any comments and suggestions are welcomed.
Title:	*
Content:
Email：	*
Verification Code:	Refresh

中国科学院软件研究所机构知识库