SHF: Medium: Assurance Based Development: A Rational Approach To Creating High Assurance Software

本研究的目的是创建一个方法，以软件开发的关键系统，高水平的保证是必不可少的，以防止故障产生严重的后果。正在开发的方法，基于保证的开发（ABD），是基于两个严格的论点，在整个开发过程中不断发展。适合性论证表明系统具有满足所有利益相关者所需的功能性、非功能性（包括法律的和道德的）和可靠性属性，而成功性论证表明开发活动如何在时间和预算限制内产生令人满意的系统。因为这些论点捕捉到了所有涉众的关注点，它们在任何给定时间的状态都揭示了开发人员的义务。选择发展活动来履行这些义务有助于及早发现和避免潜在的保证困难。选择还允许开发人员部署昂贵的技术，如正式验证，只在组件的保证需求的要求，ABD的评价和评估正在进行使用的原型人工心脏泵和安全关键应用程序的案例研究。

The objective of this research is to create an approach to software development for critical systems where a high level of assurance is essential to prevent failures from having serious consequences. The approach being developed, Assurance Based Development (ABD), is based on two rigorous arguments that evolve throughout development. A fitness argument shows that the system has the functional, non-functional (include legal and ethical) and dependability properties necessary to satisfy all stakeholders, and a success argument shows how the development activities will yield a satisfactory system within time and budget constraints. Because these arguments capture the concerns of all stakeholders, their state at any given time reveals the obligations incident on the developers. Choosing development activities to meet these obligations facilitates early detection and avoidance of potential assurance difficulties. Choice also allows the developer to deploy expensive technology, such as formal verification, only on components whose assurance needs demand it.Evaluation and assessment of ABD is being conducted using case studies of a prototype artificial heart pump and a security-critical application.