基于错误传播分析的软件脆弱点识别方法研究  

An Approach for Identifying Software Vulnerabilities Based on Error Propagation Analysis

作　　者：李爱国[1] 洪炳镕[1] 王司[2] 

机构地区：[1]哈尔滨工业大学计算机科学与技术学院,哈尔滨150001 [2]哈尔滨工业大学航天学院,哈尔滨150001

出　　处：《计算机学报》2007年第11期1910-1921,共12页Chinese Journal of Computers

基　　金：航天基金(417010402);航天创新基金(CASC0409)资助~~

摘　　要：在太空环境中,软件系统经常受到各种辐射现象的影响.在此类环境下,寻找软件脆弱点主要是考虑环境扰动对该软件的影响.文中提出了一种由环境扰动引入的软件脆弱点的分析方法.首先在对软件系统模块化的基础上,通过在两个层面上分析错误在软件中的生成及其传播过程,给出寻找软件脆弱点的理论框架,随后进一步给出该框架中一些参数的实验估计方法,最后给出该框架在某卫星光纤陀螺捷联航姿控制系统上的应用.应用结果令人满意.For the software system operating in space environment where radiation phenomenon exists widely, identifying the vulnerabilities emphasizes particularly on the analysis about the effect of environment on the software. This paper presents a methodology for analyzing the vulnerabilities in software subiected to environment perturbation. Based on the premise that the software has been modularized, this methodology analyzes the error-generation and error-propagation process in software from signal and module level each, as a result of giving a theory framework for identifying software vulnerabilities. Whereafter, a fault-iniection-based method for estimation of the various measures in the framework is described and the software of a real embedded control system used in a satellite is analyzed to show the type of results obtained by the methodology.

关 键 词：软件脆弱点 错误传播 故障注入 环境扰动 单粒子效应 

分 类 号：TP302[自动化与计算机技术—计算机系统结构]