Software safety argumentation method based on Toulmin model

Abstract

The invention discloses a software safety argumentation method based on a Toulmin model. The software safety argumentation method comprises the following steps of: using a software safety target required to be performed argumentation as a core; providing factual evidence supporting the target; for doubts, giving a right reason to provide the factual evidence for supporting the target and support for strengthening the authoritative statement of the right reason; determining determiners for target achievement degree if the target is not completely a fact; and giving refutation that prevents authenticating the target reasonable based on the right reason, so as to achieve the safety argumentation method using the software safety target as the core. The software safety argumentation method is more free and extensible, capable of directly and more clearly indicating how the software safety target is satisfied, and simultaneously promoting the development to actively carry out safety security work in a more effective manner, thereby improving the software safety in a more active manner.

Description

technical field [0001] The invention belongs to the field of software safety engineering, and relates to a software safety demonstration method therein, in particular to a software safety demonstration method based on Toulmin mode. Background technique [0002] Safety refers to the ability to avoid accidents that result in personal injury or death, occupational disease, equipment damage or property loss. The control and safety protection of Safety-Critical System (Safety-Critical System) is a very important application field of computer. As the proportion of software (called Safety-Critical Software) in safety-critical systems increases, software also has security issues. Therefore, safety-critical software is certified before it is put into use to determine whether it meets the system requirements. The required security is a basic requirement. [0003] At present, there are different standards for software security demonstration in different industries at home and abroad,...

AI Technical Summary

Problems solved by technology

Although these standards are inconsistent in some details such as the technology advocated and the method of verification, the basic principle of the demonstration is the same: according to providing some evidence (Evidence) of the software safety engineering process, it can be shown that the safety of the software has reached the corresponding There are deficiencies in this process-oriented safety certification that fully follows the standards: on the one hand, there is no necessary connection between the development process, tools and technologies that are required to be followed and the reduction of software failure rate, and how to meet software safety requirements does not matter Clear; on the other hand, it is easy to cause such a misunderstanding: software security is the responsibility of the standard makers, not the software developers.

Images