Method for screening security subset of security-critical software modeling language

Abstract

The invention discloses a method for screening a security subset of a security-critical software modeling language. The method comprises the following steps: (1) establishing a complete vocabulary setof the modeling language; (2) removing unsafe elements from the complete vocabulary set, and establishing a preliminary screening version of a safe subset; (3) establishing a target domain programming element set; (4) carrying out adequacy analysis of the security subsets; and (5) carrying out safety verification of the safety subset. The method provided by the invention ensures the sufficiency,necessity and security of the security subset, so that the security subset not only can meet the requirements of security critical software development, but also avoids the problems caused by repeatedelement functions in the security subset, thereby generating a modeling language with extremely high security.

Description

technical field [0001] The invention belongs to the field of software development, in particular to a method for screening safety-critical software modeling language safety subsets. Background technique [0002] Fields such as aerospace impose stringent requirements on the safety of software that can lead to catastrophic risks, known as safety-critical software. Software development requires the use of programming languages, and each programming language defines the vocabulary and grammar it uses to form a corresponding vocabulary set and grammar set. In order to avoid the problems of the programming language itself from introducing design defects, the development of safety-critical software must further restrict the vocabulary and grammar of the selected programming language, so as to establish a safe subset of the programming language, and then develop software products based on this . [0003] Model-based software design uses a graphical modeling language to build model...

AI Technical Summary

Problems solved by technology

Safety subsets play an important role in modeling safety-critical software, but are prone to lack of sufficiency, necessity, and safety

When the sufficiency is insufficient, the safety subset cannot meet the needs of safety-critical software development; when the necessity is insufficient, the safety subset will have repeated or similar elements, and the elements with repeated functions will lead to the same logic may produce different choices and Different results are designed, and elements with similar functions are likely to cause errors in use; when the security is insufficient, the elements of the safe subset cannot generate code or the generated code has security risks, and the elements of the safe subset do not have clear functions. The interface and good graphic display make the model designer make mistakes due to misunderstanding

Images