节点文献
基于误用例的系统安全性需求
System safety requirement based on misuse case
【摘要】 为更高效获取系统的安全性需求,提出一种相对完善的构建误用例模型的方法。识别系统的功能性需求,即用例模型;将危险与可操作性分析(HAZOP)方法的引导词与用例元素相结合,得到相应的偏差;通过分析偏差是否会产生危害来确定误用例,构建误用例模型,得到系统的安全性需求。基于HAZOP的误用例构建方法能够提高安全分析人员的工作效率。通过锅炉供热系统案例,验证了该方法的可行性和有效性。
【Abstract】 To acquire system security requirements more efficient,a relatively perfect method of constructing the misuse case model was proposed.System functional requirements were identified,namely,the use case model.The guide words of hazard and operability analysis(HAZOP)method was combined with use case element to get the corresponding deviation.Whether the deviation produced harm was analyzed to determine misuse case,the misuse case model was constructed,and system security requirements were achieved.The method of constructing misuse cases based on the HAZOP can improve the efficiency of the security analysts.Through the case of boiler heating system,the feasibility and validity of the method is verified.
【Key words】 misuse case; use case; HAZOP; hazard; security requirements;
- 【文献出处】 计算机工程与设计 ,Computer Engineering and Design , 编辑部邮箱 ,2016年10期
- 【分类号】TP309
- 【被引频次】2
- 【下载频次】42