Element-oriented software design for improving security and robustness conformity

为了使软件系统可靠和稳定，系统必须表现出预期的特性，不仅是其功能，而且是其他方面，如安全性和鲁棒性。近年来，大量的软件组件被用来构建一个系统。此外，通常会插入更多的动态组件（如移动的代码），以在运行时实现某些功能。这表明，组件的特性的评估是重要的，在运行时以及实现阶段。然而，详尽的评估，实际上是困难的，可能是多余的，因为：（1）有很多的“黑盒”组件，（2）观察的特性和规格要求可能会有所不同，这取决于目的和上下文的组件使用。组件的“元素”是指在特定运行上下文中特定执行情况下的特征。组件仅在目标系统中的使用范围内进行检查（1），（2）其元素是否符合规范。这种评估是依赖于上下文的，也就是说，在其他条件下的组件行为被忽略。为了实现对伪代码构件的评估，提出了一种伪代码构件信息流跟踪方法，并对该方法进行了评估。

To make a software system reliable and stable, it is essential that the system exhibit expected characteristics not only for its functionality, but for other aspects such as security and robustness. In recent years, a lot of software components are used to build a system. In addition, it is common that more dynamic components, such as mobile codes, are plugged-in to fulfill some functionality at runtime. This suggests that the assessment of characteristics of components is important at runtime as well as implementation phase. The exhaustive assessment is, however, practically difficult and possibly redundant because : (1) there are a lot of "black-box" components, (2) characteristics to observe and specifications to require may vary depending of the purpose and the context of component usage.This research has proposed the element-oriented software design for assuring security and robustness characteristics. An "element" of a component refers to the characteristics under specific execution situation within specific running context. A component is examined (1) only within the extent of the usage in the target system (2) whether its element conforms to the specification. This assessment is context-dependent, that is, component behaviors under other conditions are disregarded. To realize the assessment, a method of information flow tracking for pseudo code components is developed and evaluated.