基于小世界网络的软件安全风险传播分析  

Analysis of software safety risk propagation based on small world networks

作　　者：刘学敏[1] 周经伦[1] 罗鹏程[1] 

机构地区：[1]国防科学技术大学信息系统与管理学院,湖南长沙410073

出　　处：《江苏大学学报（自然科学版）》2011年第1期89-93,共5页Journal of Jiangsu University：Natural Science Edition

基　　金：国家"863"计划项目(2008AA04Z409);国防科技大学优秀博士生创新基金资助项目(0905001)

摘　　要：针对软件安全风险传播难以直观描述的问题,应用小世界网络理论对其进行了研究.首先,介绍了软件安全风险的相关概念和小世界网络的性质及模型.其次,在分析软件系统网络拓扑结构的基础上,基于小世界网络理论建立了软件构件间安全风险传播的动力学模型,得到软件安全风险的传播结果,并分析影响软件安全风险传播的关键因素.最后,以某型飞机软件系统为例进行了仿真示例分析.结果表明,风险传播时危险严重性较危险可能性(风险的两方面)影响作用更大,而始于度数比较小桥梁节点的风险在网络中要传播得更快.该结论将有益于指导软件安全风险的控制.To solve the problem that the direct description of safety risk propagation was difficult in safety risk assessment,the small world networks theory was applied.The concepts of software safety risk,the characters and models of small world networks were introduced.The topology structure of software network was analyzed,and a dynamic model of risk propagation in the software components was established based on small world networks theory.According to this model,the result of risk propagation and the key factor for risk propagation were obtained.To demonstrate the performance gains of this model,an airplane software system was analyzed as an example.The results show that hazard severity is more important than hazard probability in terms of influence on the risk,and the risk deriving from a small degree node has faster spreading speed.The conclusion can be used to guide the software risk control and improve software safety.

关 键 词：软件 危险 风险 传播 风险评估 小世界网络 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论] X924[自动化与计算机技术—计算机科学与技术]