面向源代码可信证据的航天软件可信度量评估方法  

An Approach for Trustworthy Evidence of Source Code Oriented Aerospace Software Trustworthiness Measurement

作　　者：刘晗[1] 陶红伟 陈仪香[1] LIU Han;TAO Hongwei;CHEN Yixiang(Software Engineering Institute,MOE Engineering Research Center for Software/Hardware Co-Design Technology and Application,East China Normal University,Shanghai,200062,China;School of Computer and Communication Engineering,Zhengzhou University of Light Industry,Zhengzhou,450002,China)

机构地区：[1]华东师范大学软件工程学院,教育部软硬件协同设计技术与应用工程研究中心,上海200062 [2]郑州轻工业大学计算机与通信工程学院,郑州450002

出　　处：《空间控制技术与应用》2021年第2期32-41,共10页Aerospace Control and Application

基　　金：国家重点研发项目(2018YFB2101300);河南省重点研发与推广专项(科技攻关)资助项目(212102210076,202102210351)。

摘　　要：随着航天技术的迅猛发展,航天软件的功能越来越复杂,规模越来越大,对软件可信性的要求也越来越高.航天软件一旦失信,其带来的损失往往无法估量.从源代码证据入手,建立面向航天领域的嵌入式软件可信度量评估方法.结合航天领域特性,建立了面向C语言代码的可信证据规范,该证据规范区分关键证据与非关键证据以及可信正证据和可信负证据;提出一种面向源代码可信证据的航天软件可信性度量模型和可信性分级模型;最后通过将所构建的评估方法应用于NASA开源软件Core Flight Executive的可信量化评估,评估结果表明本文所建立的可信量化评估方法具有良好的有效性和实用性.In recent years,with the rapid development of aerospace technology,the functions of aerospace software are becoming more and more complex and the scale is getting lager while the requirements for software trustworthiness are getting further.Once aerospace software is untrustworthy,the loss it brings is often incalculable.We propose an approach for software trustworthiness measurement for aerospace,starting from the trustworthy evidence of source code in combination with the characteristics of aerospace.We design a trustworthy evidence standard for C Language which distinguishes key evidence from the evidence and includes positive evidence and negative evidence.Then,we propose an approach of aerospace software trustworthiness measurement oriented to trustworthy evidence of source code and a software trustworthy classification model.Finally,we use the approach to measure the trustworthiness of NASA’s open source code Core Flight Executive,and the result proves the effectiveness and practicality of our approach.

关 键 词：源代码 可信证据 可信软件 可信性度量 软件分级 

分 类 号：TP311.5[自动化与计算机技术—计算机软件与理论]