模型驱动的软件构件研制保证水平验证方法  

Model-driven validation method for software component development assurance level

作　　者：朱和铨[1] 徐浩军[1] 张鹏[1] 张登成[1] 孙曦 

机构地区：[1]空军工程大学航空航天工程学院,西安710038 [2]中航飞机汉中飞机分公司设计研究院,汉中723213

出　　处：《航空学报》2015年第3期907-920,共14页Acta Aeronautica et Astronautica Sinica

基　　金：国家自然科学基金(61374145;U1333131);国家"973"计划(2015CB755802;2015CB755805);中国博士后科学基金(201150M1551);陕西省自然科学基础研究计划项目(2012JQ8010)~~

摘　　要：在机载软件架构设计阶段,人们将安全性研制保证水平分配到具体的构件中,确保产品质量。鉴于现代航空软件系统极其复杂,如何从系统角度,检验分配给构件的安全性等级符合系统的一致性目标,是设计阶段需要解决的重要问题。首先,分析了分布式和综合式机载软件系统的架构特点,得出了在安全性分析工作中需要考虑冗余等架构设计的影响的结论。其次,使用系统建模语言(SysML)块图建立带有安全性等级属性的系统静态结构模型,利用矩阵对模型进行精确的形式化转换;制定验证规则,在此基础上给出了验证方法,以验证安全性等级分配的合理性。在验证过程中,将关键信息存储在XML文档中,可为适航性审查提供证据。最后,通过实例分析,验证了该方法的可行性。In the airborne software architecture design phase,people assign the safety related development assurance level to specific component to ensure the quality of the product.In view of the modern aviation software system is extremely complex,one of the key problems that how to verifying the safety grade assigned to individual conforms to the goal of the system from the system point of view need to be solved in the design phase.Firstly,this paper analyzes the distributed and integrated architectures characteristic of airborne software system,draw a conclusion that the influence from the redundancy architecture design must be considered in the work of safety analysis.Secondly,the static structure of a system is specified by a system modeling language（SysML）block definition diagram with the description of safety properties.The SysML model is then transformed to formal model using matrix method.Verification rules are set up.Based on the above,a method for checking the rationality of the safety degree assignment is proposed.In the process of verification,the critical information is stored to an XML document to provide evidence for airworthiness review.Finally,the feasibility of this method is verified by an example analysis.

关 键 词：软件安全性 验证与确认 研制保证水平 SYSML DO-178B/C 

分 类 号：V219[航空宇航科学与技术—航空宇航推进理论与工程] X949[环境科学与工程—安全科学]