论文标题
DESCERT:认证设计
DesCert: Design for Certification
论文作者
论文摘要
DARPA自动化软件(ARCO)计划的目标是“自动对软件保证证据进行评估,以使认证者能够迅速确定系统风险是可以接受的。”作为该计划的一部分,DESCERT项目着重于新软件的保证驱动开发。 Descert团队由SRI International,Honeywell Research和Washington大学组成。我们采用了一种基于工具的正式方法来构建由严格证据支持的软件工件。 DESCERT工作流程将证据生成整合到一个设计过程中,该过程从需求捕获和分析到将高级软件需求分解为构建属性和软件组件,并具有宣称合同,以及可以动态和静态分析的软件。生成的证据是通过保证本体论组织的,并集成到机架知识库中。
The goal of the DARPA Automated Rapid Certification Of Software (ARCOS) program is to "automate the evaluation of software assurance evidence to enable certifiers to determine rapidly that system risk is acceptable." As part of this program, the DesCert project focuses on the assurance-driven development of new software. The DesCert team consists of SRI International, Honeywell Research, and the University of Washington. We have adopted a formal, tool-based approach to the construction of software artifacts that are supported by rigorous evidence. The DesCert workflow integrates evidence generation into a design process that goes from requirements capture and analysis to the decomposition of the high-level software requirements into architecture properties and software components with assertional contracts, and on to software that can be analyzed both dynamically and statically. The generated evidence is organized by means of an assurance ontology and integrated into the RACK knowledge base.