安全苛求软件需求规格中的安全特性验证方法  

Validation method of security features in safety critical software requirements specification

作　　者：王飞 郭渊博[1] 李波 郝耀辉[1] 

机构地区：[1]信息工程大学网络空间安全学院,郑州450004

出　　处：《计算机应用》2013年第7期2041-2045,共5页journal of Computer Applications

基　　金：河南省科技创新杰出青年计划项目(104100510025)

摘　　要：针对自然语言描述的安全苛求软件需求规格中安全特性不准确、不一致等问题,提出一种基于UMLsec安全特性验证方法。该方法在UML需求模型类图和顺序图的基础上,为核心类的安全特性自定义构造型、标记和约束,完成UMLsec模型构建;之后,使用设计实现的UMLsec支持工具对安全特性进行自动验证。实验结果表明,该方法能准确描述安全苛求软件需求规格的安全特性,同时可以自动验证安全特性是否满足安全需求。Since the security features described by natural language in the safety-critical software requirements specification are of inaccuracy and inconsistence, a validation method of security features based on UMLsec was proposed. The method completed the UMLsec model by customizing stereotypes, tags and constraints for security features of the core class on the basis of class diagram and sequence diagram for UML requirements model. Afterwards, the support tool for designing and implementing UMLsec was used for automatic verification of security features. The experimental results show that the proposed method can accurately describe security features in the safety-critical requirements specification and can automatically verify whether the security features meet the security requirements.

关 键 词：UMLsec 安全特性 验证 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]