安全苛求软件需求规格中安全特性验证方法

《安全苛求软件需求规格中安全特性验证方法》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、安全苛求软件需求规格中安全特性验证方法　　文章编号:10019081(2013)07204105doi:10.11772/j.issn.10019081.2013.07.2041摘要:针对自然语言描述的安全苛求软件需求规格中安全特性不准确、不一致等问题，提出一种基于UMLsec安全特性验证方法。该方法在UML需求模型类图和顺序图的基础上，为核心类的安全特性自定义构造型、标记和约束，完成UMLsec模型构建；之后，使用设计实现的UMLsec支持工具对安全特性进行自动验证。实验结果表明，该方法能准确描述安全苛求软件需求规格的安全特性，同时可以自动验证安全

2、特性是否满足安全需求。关键词：UMLsec；安全特性；验证中图分类号：TP311文献标志码:A英文标题Validationmethodofsecurityfeaturesinsafetycriticalsoftwarerequirementsspecification英文作者名WANGFei*,GUOYuanbo,LIBo,HAO5Yaohui英文地址(CollegeofCyberspaceSecurity,InformationEngineeringUniversity,ZhengzhouHenan450004,China英文摘要)Abstra

3、ct:Sincethesecurityfeaturesdescribedbynaturallanguageinthesafetycriticalsoftwarerequirementsspecificationareofinaccuracyandinconsistence,avalidationmethodofsecurityfeaturesbasedonUMLsecwasproposed.ThemethodcompletedtheUMLsecmodelbycustomizingstereotypes,tagsandconstraintsforsecurityfea

4、turesofthecoreclassonthebasisofclassdiagramandsequencediagramforUMLrequirementsmodel.Afterwards,thesupporttoolfordesigningandimplementingUMLsecwasusedforautomaticverificationofsecurityfeatures.Theexperimentalresultsshowthattheproposedmethodcanaccuratelydescribesecurityfeaturesinthesafet

5、ycriticalrequirementsspecificationandcanautomaticallyverifywhetherthesecurityfeatures5meetthesecurityrequirements.Forsecurityfeaturesdescribedbynaturallanguageinthesafetycriticalsoftwarerequirementsspecificationexistinginaccuracyandinconsistence,itwasproposedthatthevalidationmethodofs

6、ecurityfeaturesbasedonUMLsec.ThemethodcompletedtheUMLsecmodelbycustomingstereotypes,tagsandconstraintsforsecurityfeaturesofthecoreclassonthebasisofUMLrequirementsmodelclassdiagramandsequencediagram;Afterthat,theuseofthedesigningandimplementingUMLsecsupportingtoolforautomaticverification

7、ofsecurityfeatures.Theexperimentalresultsshowthattheproposedmethodcanaccuratelydescribesecurityfeaturesinthesafetycriticalrequirementsspecificationandcanautomaticallyverifywhetherthesecurityfeaturestomeetthesecurityrequirements.英文关键词Keywords:UMLsec;securityfeature;verificatio