A Framework for Modeling the Software Assurance Ecosystem: Insights from the Software Assurance Landscape Project
A Framework for Modeling the Software Assurance Ecosystem: Insights from the Software Assurance Landscape Project
复制标题
软件保障生态系统建模框架：软件保障景观项目的见解
DOI：
--
复制
发表时间：
2010
期刊：
影响因子：
--
通讯作者：
A. Moore
中科院分区：
文献类型：
--
作者：
Lisa Brownsword;Carol Woody;Christopher J. Alberts;A. Moore
摘要：本报告描述了卡内基梅隆软件工程研究所（SEI）保证建模框架。它还讨论了框架的初步试验，以证明其价值和从试验中获得的见解，以采用选定的保证解决方案。SEI正在开发一种方法来模拟保证的关键方面，以加速在美国国防部（DoD）和其他政府组织的操作设置中采用保证解决方案。作为这项工作的一部分，SEI研究人员开发了一个保证建模框架，以在保证质量（如安全性）中为保证能力领域（如漏洞管理）构建一个概要文件。该概要文件由使用选定的方法和模型开发的许多视图组成。通过对这些视图的分析，可以确定采用保证的低效率和候选改进。
Abstract : This report describes the Carnegie Mellon Software Engineering Institute (SEI) Assurance Modeling Framework. It also discusses an initial piloting of the framework to prove its value and insights gained from that piloting for the adoption of selected assurance solutions. The SEI is developing a way to model key aspects of assurance to accelerate the adoption of assurance solutions within operational set-tings for the U. S. Department of Defense (DoD) and other government organizations. As part of that undertaking, SEI researchers have developed an Assurance Modeling Framework to build a profile for an assurance capability area such as vulnerability management with-in an assurance quality such as security. The profile consists of many views developed using selected methods and models. From the analysis of these views, inefficiencies and candidate improvements for assurance adoption can be identified.