AADL-based system vulnerability model design method

Abstract

The invention relates to an AADL-based system vulnerability model design method, which establishes an access control strategy on the basis of a software architecture model, carries out system vulnerability modeling, and improves the modeling capability of the AADL. According to the method, in the form of AADL appendix extension, an AADL appendix sublanguage is provided to achieve vulnerability modeling. The method comprises the following steps: (1) establishing a system architecture model; (2) establishing a system vulnerability model, including designing an access control strategy and establishing a vulnerability model appendix library and vulnerability model appendix clauses; and (3) integrating the architecture model and the vulnerability model to obtain a system model containing the vulnerability model. According to the method, a system vulnerability model is established in the software design stage, an architecture model and access control are combined, the access control relation between software system components is described, a basis is provided for detecting vulnerability defects generated in the design stage, and optimization of the system design is facilitated.

Description

technical field [0001] The invention belongs to the field of embedded software safety modeling, and specifically proposes a system vulnerability model design method based on AADL. Background technique [0002] Vulnerability refers to any deficiency or defect in the system, which can be exploited by external objects to cause damage to the system. From the perspective of access control, the access control policy specifies the access authorization of the system, and the system state is described by a triplet composed of subject, object and access matrix, and the access matrix contains the security policy of the system. Vulnerabilities arise when the system performs operations that conflict with the security policies defined by the access control matrix. In a complex software system, the interaction between subsystems is complex, and the security requirements of different subsystems are different. Defects are easy to occur in the system design stage, which leads to software vul...

AI Technical Summary

Problems solved by technology

The AADL architecture model describes the components of the system and the interaction between components, but AADL does not have the ability to describe the access control relationship between components in the software system. It is necessary to increase the modeling capability of software vulnerability to meet the needs of software architecture design.

Images