一种航空机载嵌入式软件安全性评价方法研究

Research on a Security Evaluation Method of Airborne Software Testing

摘要:

机载嵌入式软件是航空电子系统的重要组成部分,其安全性直接关系到飞行安全。由于软件安全性包含的范围较广,对安全性的评价往往周期长、结果不明确。针对嵌入式软件安全性评价的难题,在软件的整个生命周期采用分类模糊综合评价方法,建立了评价模型,提出了一种嵌入式软件安全性评价方法,在软件生命周期的5个阶段提出了59种评价元素,每种评价元素均反应出软件在每个阶段的关键活动。在各个阶段选择相关项目人员对每个元素进行评价,并依据计算公式得出软件安全分值。通过工程实践证明,该方法切实可用,评价过程相比传统的方法节约了时间,评价结果准确、直观,为航空机载嵌入式软件尤其是型号软件的安全性评价提供了一种新方法,为软件总体质量的评价和软件安全性的改进方向提供支撑。

Abstract:

Airborne embedded software is an important part of avionics systems and its safety is directly related to flight safety. Because software security covers a wide range, the evaluation of security tends to be long-term and the results are not clear. Aiming at the difficulty of embedded software security evaluation, the classification fuzzy comprehensive evaluation method was adopted in the whole life cycle of the software, and the evaluation model was established. An embedded software security evaluation method was proposed, and fifty-nine evaluation elements were proposed in five stages of its life cycle. Each evaluation element reflects the key activities of the software in each stage. The relevant project personnel are selected to evaluate each element, and the software safety value is obtained according to the calculation formula. Proved by engineering practice, the method is practical, the evaluation process saves time compared with the traditional method, and the evaluation result is accurate and intuitive. It provides a new method for the safety evaluation of aviation airborne embedded software, especially model software. Providing support for the overall quality of the software and the improvement direction of software security.