检索结果-南通市图书馆

A software safety Requirements Elicitation Approach Based on Hazardous Control Action Tree Modelling

Chinese Journal of Electronics 2021年第4期30卷 676-685页

作者： ZHU Danjiang YAO Shuzhen TAN Huobin The 32nd Research Institute of China Electronics Technology Group Corporation School of Computer Science and Engineering Beihang University

software safety requirements are crucial for safety assurance of safety-critical software systems. A novel accident causality model, Systems-theoretic accident modeling and processes(STAMP), has been proposed to overcome the limitations of traditional safety techniques in software safety requirements elicitation.However,the STAMP-based method is ad-hoc with no rigorous procedure to elicit software safety requirements effectively.Furthermore, the time-related safety requirements, which are important to software safety, have been paid little attention in STAMP-based method. With the purpose of overcoming these limitations, this paper strives to find a systematic approach to elicit software safety requirements with STAMP, especially the time-related safety requirements. Firstly, a new process model of STAMP is proposed to model all the system varilables and the ralationship of them in control processes. Then based on the process model, an approach HCAT-SSRA is proposed to elicit the software safety requirements by building Hazardous control action tree(HCAT) for each control action in system control processes. Additionally,several rules are proposed to guide time-related software safety requirements analysis. Finally, a case study is given to illustrate the availability and feasibility of the proposed method.

关键词： software safety software safety requirements analysis(SSRA) Requirements elicitation

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Anticipatory active monitoring for safety-and security-critical software

引用

Science China(Information Sciences) 2012年第12期55卷 2723-2737页

作者： Martin LEUCKER Institute of software Technology and Programming Languages University of Lbeck

Since formal verification and testing of systems is normally faced with challenges such as state explosion and uncertain execution environments,it is extremely difficult to exhaustively verify and test software during the development phase.Therefore,monitoring has become an indispensable means for finding latent software faults at runtime.Most current monitoring approaches only generate passive monitors,which cannot foresee possible faults and consequently cannot prevent their occurrence.In this paper,we propose an active monitoring approach based on runtime verification.This approach aims to predict possible incoming violations using a monitor that executes anticipatory semantics of temporal logic,and then generates the necessary steering actions according to a partial system model,which steers the system away from paths causing these violations.In this case,the monitor and monitored system make up a discrete feedback control loop.We further investigate the control theory behind active monitoring so that non-blocking controllability can be achieved.The results of applying active monitoring to two cases,a railway crossing control system and security-enhanced Linux(SELinux),show that the method can effectively ensure both safety and security properties at runtime.

关键词： active monitoring runtime verification anticipation software safety software security

来源：

同方期刊数据库评论

在线全文

同方期刊数据库

学校读者我要写书评

暂无评论

Pusher:an augmented fuzzer based on the connection between input and comparison operand

引用

Frontiers of Computer Science 2022年第4期16卷 19-31页

作者： Bin Zhang Jiaxi Ye Ruilin Li Chao Feng Yunfei Su Chaojing Tang College of Electronic Science National University of Defense TechnologyChangsha410072China

Coverage based fuzzing is a widespread vulnerability detection technique,and it has exposed many bugs in many real-world programs.However,its attention is to eliminate the testing on the repeated paths,yet it still employs random mutation to generate inputs,which is blind to penetrate complex comparisons in the program.As a result,the testing coverage is limited.Despite some solution proposals are presented,this problem is still partially solved.This paper argues that random mutation is mainly limited by two challenges,the sizable search space and the lack of a useful feedback to direct the search.Then we present an augmented fuzzing technique by addressing these two challenges.First of all,we point out a black relationship between input contents and comparison operands,which is dubbed connection.Second,we present a novel method to collect the comparison operands during execution,which is leveraged to infer the connections.Based on the connections,the fuzzer can learn about which input byte affects on which comparison instruction to establish a smaller search space.Third,the connection provides a useful feedback to direct the search.We resort to a modern metaheuristic algorithm to satisfy this searching requirement.We developed a prototype Pusher and evaluated its performance on several benchmarks and four real-world programs.The experimental results demonstrate that Pusher works better than some other state-of-the-art fuzzers on bug detection,and can achieve a higher testing coverage.Moreover,we take a detailed statistic about the execution overhead in Pusher,and the results indicate that the execution overhead introduced by our approach is within an acceptable scope.

关键词： software safety software testing information security vulnerability searching

来源：

维普期刊数据库评论

在线全文

维普期刊数据库

学校读者我要写书评

暂无评论

Is Free-software Open-Source ready for Medical Applications?

Is Free-Software Open-Source ready for Medical Applications?

引用

2008 IEEE International Symposium on IT in Medicine and Education(ITME 2008)

作者： Nicholas Mc Guire Distributed ＆ Embedded System Lab（DSLab） Lanzhou UniversityChina Engineering Research Center of Open Source software and Real-Time Systems Ministry of EducationLanzhou UniversityChina

While in the past years free-software has gained some acceptance in the domain of medical applications it has been mainly focused on quite typical IT-infrastructure cases -may that be billing systems,data warehousing,databases and content management systems a second area where free software has made prominent entrance has been in the area of imaging and high-volume data processing.In the area of medical devices,with rare exceptions,free-software is still quite underrepresented -in part due to acceptance but in part also due to plain technical reasons.GNU/Linux,real-time and embedded variants and many free-software projected have made there way into medical applications -but is Free-software ready to cover the wide area of demands on medical platforms and there applications? The demands of medical platforms stretch more or less the entire range of computational capabilities: * battery powered -robust against power-failures * reliable in rough environment * compliant with safety regulations * robust and secure software platforms * standalone,networked all the way to clusters * extensibility for specialized hardware and software * from head-less to multithread graphical user-interfaces And all this for devices that sometimes only will be built in a few 10s or hundred devices? What advantages could free-software have here -what limitations are there -where do we still need to do work.Free software is not the answer to all problems in medical computing （or in any other area） -but it has a plethora of innovative and powerful solutions to discover.We will outline some of them along with some outstanding medical applications that have been built on free-software components.

关键词： Open source software Medical services Biomedical equipment Biomedical imaging software safety Robustness Warehousing Image databases Content management Data processing

来源： cnki会议评论

在线全文

cnki会议

学校读者我要写书评

暂无评论

SFTA Based Saftey Analysis for Bridge Pattern

SFTA Based Saftey Analysis for Bridge Pattern

引用

The 8th International Conference on Reliability,Maintainability and safety(ICRMS 2009)

作者： Guoqi Li Department of System Engineering of Engineering Technology Beihang University Beijing100191.China Minyan Lu and Bin Liu Department of System Engineering of Engineering technology Beihang University Beijing 100191 China

＜正＞To analysis the influence of application of design patterns to software safety,we carry out a case study on bridge pattern with SFTA（software Fault Tree Analysis）.The result shows that the application of bridge pattern will make the safety reduce 50%,but the introduction of the pattern can decouple the software modules and redundancy design can be added.Double redundancy will improve software safety by 2 orden of magnitude.The conclusion is valuable for object-oriented design of safety-critical software and the method can also be used to analyze safety of other design patterns.

关键词： SFTA Design patterns software safety

来源： cnki会议评论

在线全文

cnki会议

学校读者我要写书评

暂无评论

欢迎您,

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案：

请选择收藏分类：

通借通还

欢迎您,

建议与咨询 留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

时间限定

文献类型

馆藏选择

核心期刊

语言

文献类型

帮助

文字说明：

检索规则说明：

检索范例：

分类表

所选分类

限定检索结果

文献类型

馆藏范围

日期分布

学科分类号

主题

机构

作者

语言

在线全文

在线全文

在线全文

在线全文

在线全文

请选择保存的检索档案： 新增检索档案 确定 取消

请选择收藏分类： 新增自定义分类 确定 取消

通借通还

建议与咨询留下您的常用邮箱和电话号码，以便我们向您反馈解决方案和替代方法

请选择保存的检索档案：

请选择收藏分类：