As trust becomes increasingly important in software domain, software trustworthiness--as a complex high- composite concept, has developed into a big challenge people have to face, especially in the current open, dynam...As trust becomes increasingly important in software domain, software trustworthiness--as a complex high- composite concept, has developed into a big challenge people have to face, especially in the current open, dynamic and ever-changing Internet environment. Furthermore, how to recognize and define trust problem from its nature and how to measure software trustworthiness correctly and effectively play a key role in improving users' trust in choosing software. Based on trust theory in the field of humanities and sociology, this paper proposes a measurable S2S (Social-to-Software) software trustworthiness framework, introduces a generalized indicator loss to unify three parts of trustworthiness result, and presents a whole metric solution for software trustworthiness, including the advanced J-M model based on power function and time-loss rate for ability trustworthiness measurement, the fuzzy comprehensive evaluation advanced-model considering effect of multiple short boards for basic standard trustworthiness, and the identity trustworthiness measurement method based on the code homology detecting tools. Finally, it provides a case study to verify that the solution is applicable and effective.展开更多
为克服软件可信性评估过程中可信证据正面度量收集数据困难的问题,提出基于软件缺陷的可信证据度量模型(trustworthy evidence measurement model based on software defects,TEMMSD),利用软件系统中存在的缺陷类型、数目以及缺陷严重...为克服软件可信性评估过程中可信证据正面度量收集数据困难的问题,提出基于软件缺陷的可信证据度量模型(trustworthy evidence measurement model based on software defects,TEMMSD),利用软件系统中存在的缺陷类型、数目以及缺陷严重程度等因素,从侧面实现可信证据度量。通过软件开发者、第三方测评和用户反馈3个方面采集、获取软件生命周期中不同阶段存在的缺陷数据并对初始数据进行预处理,运用正交缺陷分类法对缺陷数据进行缺陷分析并可信归类,从主客观的角度确定缺陷类型的权重,实现软件系统的缺陷证据度量。对石油企业自然递减跟踪系统进行实例分析,分析结果表明,TEMMSD模型在软件可信证据度量中具有可行性和有效性。展开更多
基金This work was supported by the National Natural Science Foundation of China under Grant No. 90818021, the HeGaoJi Program of China under Grant No. 2012zx01039-004-46, and the Information Security Program of National Development and Reform Commission of China under Grant No. 2012-1424.
文摘As trust becomes increasingly important in software domain, software trustworthiness--as a complex high- composite concept, has developed into a big challenge people have to face, especially in the current open, dynamic and ever-changing Internet environment. Furthermore, how to recognize and define trust problem from its nature and how to measure software trustworthiness correctly and effectively play a key role in improving users' trust in choosing software. Based on trust theory in the field of humanities and sociology, this paper proposes a measurable S2S (Social-to-Software) software trustworthiness framework, introduces a generalized indicator loss to unify three parts of trustworthiness result, and presents a whole metric solution for software trustworthiness, including the advanced J-M model based on power function and time-loss rate for ability trustworthiness measurement, the fuzzy comprehensive evaluation advanced-model considering effect of multiple short boards for basic standard trustworthiness, and the identity trustworthiness measurement method based on the code homology detecting tools. Finally, it provides a case study to verify that the solution is applicable and effective.
文摘为克服软件可信性评估过程中可信证据正面度量收集数据困难的问题,提出基于软件缺陷的可信证据度量模型(trustworthy evidence measurement model based on software defects,TEMMSD),利用软件系统中存在的缺陷类型、数目以及缺陷严重程度等因素,从侧面实现可信证据度量。通过软件开发者、第三方测评和用户反馈3个方面采集、获取软件生命周期中不同阶段存在的缺陷数据并对初始数据进行预处理,运用正交缺陷分类法对缺陷数据进行缺陷分析并可信归类,从主客观的角度确定缺陷类型的权重,实现软件系统的缺陷证据度量。对石油企业自然递减跟踪系统进行实例分析,分析结果表明,TEMMSD模型在软件可信证据度量中具有可行性和有效性。