摘要： 目前已有多种模型驱动的软件安全性分析方法用于识别软件失效模式和系统危险,但较少将软件安全性约束与模型相结合,难以保证分析充分性与效率。针对该问题,基于对象约束语言(OCL)设计嵌入式软件安全性分析方法。借助OCL表达式对安全性相关的约束关系进行建模,形成OCL约束模型,并将其融入UML模型。在此基础上,结合嵌入式软件特点,依据约束违背原则进行失效模式识别。在某嵌入式发动机控制软件上的应用结果表明,该方法可自动识别软件失效模式,提高模型驱动安全性分析的充分性与效率,同时降低分析工作量。

关键词: 对象约束语言, 约束建模, 软件安全性分析, 失效模式, 模型驱动

Abstract: At present,many model-driven software safety analysis approaches have been proposed to identify the software failure modes and system hazards of the software products.However,these existing approaches do not integrate the safety constraint into the corresponding models,which can not ensure the analysis effectiveness and sufficiency.To solve the above problems,the safety analysis approach for the embedded software based on the Object Constraint Language(OCL) is proposed in this paper.The constraints related to the safety is described by the OCL representation to obtain the OCL-constraint model for integrating the safety constraint into the UML model.On this basis,considering the characters of embedded software,the failure mode is idenitified.This apporach is applied on the embedded engine control software to illustrate its effectiveness and feasibility.The experimental results show that it can identify the failure modes automatically and improve the effectiveness and sufficiency of the model-driven safety analysis as well as reduce the analysis effort.

Key words: Object Constraint Language(OCL), constraint modeling, software safety analysis, failure mode, model-driven

中图分类号: 

• TP309