Assurance Carrying Code for Software Supply Chain
Assurance Carrying Code for Software Supply Chain
复制标题
软件供应链保证承载代码
DOI：
10.1109/issrew53611.2021.00077
复制
发表时间：
2021
期刊：
影响因子：
--
通讯作者：
Hosokawa Yuichiro
中科院分区：
文献类型：
--
作者：
Matsuno Yutaka;Yamagata Yoriyuki;Nishihara Hideaki;Hosokawa Yuichiro
现代软件系统是由软件供应链提供的软件组件组成的，维护软件供应链的可靠性已经变得很困难。为了解决这个问题，我们引入保证承载代码，这是一个框架，在这个框架中，软件供应链中的每个软件组件都有自己的保证用例。当将软件组件集成到供应链中时，涉众检查（手动或自动）保证案例，以确定软件组件对于供应链是否可靠。在函数式程序设计语言理论中，引入了一种通过演算形式化的目标结构符号（GSN）模式语言。
Modern software systems are composed of software components supplied by a software supply chain, and it has become difficult to maintain the dependability of the software supply chain. To address this problem, we introduce assurance carrying code, a framework in which every software component in a software supply chain has its own assurance case. When integrating a software component into a supply chain, the stakeholders check (manually or automatically) the assurance case to determine whether or not the software component is dependable for the supply chain. We introduce a pattern language for Goal Structuring Notation (GSN) formalized by-calculus, which is used in a theory of functional programming languages theory.