一种基于描述语言的软件可信发布方法研究  

Trustworthy Software Distributing Mode Based on Software Description

作　　者：李剑飞 徐开勇[1] 金雷 

机构地区：[1]信息工程大学密码工程学院,郑州450004

出　　处：《计算机科学》2015年第12期224-228,262,共6页Computer Science

基　　金：国家自然科学基金项目:密码片上系统安全模型结构与验证方法研究(61072047)资助

摘　　要：目前对于高安全要求的内网环境,如何利用可信计算技术确保软件发布的安全与可靠具有重要的研究意义。由于软件可信发布具有动态性,即不同用户和平台对软件的要求不尽相同,而人为配置发布不仅效率低下而且无法确保其安全可靠,因此提出了一种用户、平台、软件之间相互选择的智能发布策略,其中的软件功能可信度算法可定量计算出软件功能符合用户需求的程度,智能匹配算法根据依赖关系生成安装序列以确保安装运行的顺利进行。同时为了描述发布过程中的软件信息及满足发布算法的需求,设计了一种基于XML的软件描述语言SDDL(Software Distribution Description Language)。通过分析及实例证明了此发布方式确实能增强软件发布的可信性。The present study of software distribution is mainly about the efficiency and integrity. For high security requirement of inner network environment, how to make use of trusted computing technology to ensure the safety and reliability of the software release has more important research significance. Because the software trust distribution is dynamic, namely the requirements of different users and platforms are different, and human configuration is inefficient and its safety and reliability cann＇t be ensured, thus an intelligent release strategy among user, platform, software was put forward. The software function reliability algorithm can quantitatively calculate the degree of the software functions conforming with user requirements, and intelligent matching algorithm can generate installation sequence based on dependency to ensure running reliably. In order to describe the software information in the distribution process and meet the needs of distribution algorithm at the same time, we designed an SDDL （Software Distribution Description Language） based on XML. Analysis and application example demonstrate that the mode can indeed enhance the trust of software distribution.

关 键 词：软件描述 软件可信发布 智能发布 可信计算 

分 类 号：TP311[自动化与计算机技术—计算机软件与理论]