Trace Queries for Safety Requirements in High Assurance Systems
Trace Queries for Safety Requirements in High Assurance Systems
复制标题
高保证系统中安全要求的跟踪查询
DOI：
10.1007/978-3-642-28714-5_16
复制
发表时间：
2012
期刊：
影响因子：
--
通讯作者：
Patrick Mäder
中科院分区：
文献类型：
--
作者：
J. Cleland;M. Heimdahl;J. Hayes;R. Lutz;Patrick Mäder
[背景和动机]安全关键软件系统几乎渗透到我们生活的方方面面。我们依赖它们提供安全的空气和自动旅行、医疗诊断和治疗、发电和配电、工厂机器人以及为特殊需求消费者提供的先进辅助系统。[问题/问题]提供明显安全的系统是困难的，因此认证和监管机构通常需要完整的生命周期可追溯性来帮助评估它们。然而，在实践中，软件生产商提供的可追溯性链接通常是不完整的、不准确的，并且对于证明软件安全性无效。此外，还没有将正式的方法构件集成到这种可跟踪性中。[主要想法/结果]为了解决这些弱点，我们提出了一系列可重复使用的可追溯性查询，作为安全关键系统中可追溯性的蓝图。特别是，我们提供了考虑正式构件的查询，旨在帮助演示：1)在与安全相关的要求中处理已识别的危险，以及2)在实现的系统中实现与安全相关的要求。我们使用可视化跟踪建模语言对这些可跟踪性查询进行建模，事实证明，该语言比事实上的SQL标准更直观。[贡献]构建安全关键系统的从业者可以使用这些跟踪查询来使他们的可跟踪性工作更加完整、准确和有效。反过来，这可以帮助构建更安全的软件系统，并展示它们对危险的适当处理。
[Context and motivation] Safety critical software systems pervade almost every facet of our lives. We rely on them for safe air and automative travel, healthcare diagnosis and treatment, power generation and distribution, factory robotics, and advanced assistance systems for special-needs consumers. [Question/Problem] Delivering demonstrably safe systems is difficult, so certification and regulatory agencies routinely require full life-cycle traceability to assist in evaluating them. In practice, however, the traceability links provided by software producers are often incomplete, inaccurate, and ineffective for demonstrating software safety. Also, there has been insufficient integration of formal method artifacts into such traceability. [Principal ideas/results] To address these weaknesses we propose a family of reusable traceability queries that serve as a blueprint for traceability in safety critical systems. In particular we present queries that consider formal artifacts, designed to help demonstrate that: 1) identified hazards are addressed in the safety-related requirements, and 2) the safety-related requirements are realized in the implemented system. We model these traceability queries using the Visual Trace Modeling Language, which has been shown to be more intuitive than the defacto SQL standard. [Contribution] Practitioners building safety critical systems can use these trace queries to make their traceability efforts more complete, accurate and effective. This, in turn, can assist in building safer software systems and in demonstrating their adequate handling of hazards.