摘要:近年来，软件可信一直是人们争论的焦点.一种比较共识的观点认为，软件可信是软件行为符合预期的程度.质量形成于过程，显然，建立质量信心的证据也散布于过程.软件开发过程中，主体、行为和各种保障手段则是建立软件可信的基本依据.基于证据的决策和管理是现代质量理论的核心，基于证据、数据驱动的软件工程都是试图从客观数据的角度去解决问题.在国家自然科学基金等计划的支持下，从过程保障的角度提出了软件过程可信度模型，其中，证据作为建立软件可信、支持可信评估的基础要素，是模型非常重要且基础的组成部分.主要研究该模型中的证据体系，遵循完整性、必要性、兼容性和可持续性这4项原则，基于过程管理的基本要素，通过调研以及与CMMI等软件过程参考模型的对接来提炼、定义和质证模型中的可信证据，使证据具备良好的公信力和可比性；同时，增加了部分目前其他模型都没有涉及的证据来刻画对软件过程的可信增强，从而建立了一个从可信实体、可信行为、可信制品这3个目标进行可信保障、并覆盖软件过程全生命周期的证据体系.该证据体系科学、客观并具有良好的公信力，结合可信度模型的其他部分，可以实现基于证据的、自底向上的软件过程可信评估，可供软件组织广泛采用.



Abstract:In recent years, software trustworthiness has been a focus of interest for researchers. A more consensus view is that software trustworthiness is the degree of how software behavior is accordant with people's expectation. The quality is formed in the process. Obviously, the evidences that build the confidence of software quality are presented in software process too. The process subjects, behaviors and the various methods to guarantee the quality of process products provide the basic evidences to establish the software trustworthiness. Evidence-based decision-making and management is the core of the modern theories of quality. Thus, both evidence-based and data-driving software engineering approaches have tried to address the problem from the perspective of objective data. Under the support of national natural science foundation of China, this study presents a software process trustworthiness model for building the confidence from the view of software processes. As the important and fundamental part in the model, evidence is used to transfer the trust chain bottom-up and to support the evaluation of trustworthiness of software process. Focusing on evidence system in the model, this study complies with four principles including integrity, necessity, compatibility and sustainability. According to the basic requirements of process management, it investigates CMMI and other software process reference models to refine and cross-examination the evidences, create some new evidence to adapt open source software development and extend some evidence to enhance the trustworthiness of process. The study develops an evidence system with high credibility, objectiveness and comparability. The presented evidence system can establish the trustworthiness from three dimensions:process subjects, process behaviors and process products. It also covers the whole lifecycle of software development. Combined with other parts of the trustworthiness model, it can support the evidence-based, bottom-up trustworthiness evaluation of software process. The presented model can be widely applied in software industry.



PDF全文下载地址:

http://jos.org.cn/jos/article/pdf/5291