收稿日期: 2008-12-01
修回日期: 2009-03-25
网络出版日期: 2009-07-15
基金资助
国家自然科学基金项目(60573048,60773135,90718007)和国家高技术研究发展计划("863"计划)项目(2007AA01Z427,2007AA01Z450)资助
An improved survivable network requirement analysis framework
Received date: 2008-12-01
Revised date: 2009-03-25
Online published: 2009-07-15
孔(王莹) , 张玉清 . 一种改进的网络可生存需求分析方法[J]. 中国科学院大学学报, 2009 , 26(4) : 555 -562 . DOI: 10.7523/j.issn.2095-6134.2009.4.018
An improved survivable network requirement analysis framework (ISNA) is proposed. It is required to choose the best suitable software development model as the framework basement from the component-oriented set, which avoids SNAs shortcoming with only one choice of heavy model named spiral. The feedback components, an embedded survivable test and fault-attack library, fix the requirements variability and guarantee its integrity. At last, we analyzed an e-business website with ISNA, proving that ISNA performs better at guiding systems implementation and improving its survivability.
Key words： SNA; survivability; requirement analysis; ISNA
[1] Vickie R W. A definition for information system survivability //Proceedings of the 37th Hawaii Internal Conference on System Sciences (HICSS04). Los Alamitos, CA: IEEE CS Press, 2004: 2086-2096.
[2] Thayer R H, Dorfman M (Eds). Software requirements engineering
[M]. Los Alamitos, CA:IEEE Computer Society Press,1997.
[3] Linger R C, Mead N R, Lipson H F. Requirements definition for survivable network systems //Proceedings of Third International Conference on Requirements Engineering.Colorado Springs: IEEE CS Press, 1998: 14-23.
[4] Nancy R Mead. Requirements engineering for survivable systems
[M]. Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2003. http://www.sei.cmu.edu/pub/documents/03.reports/pdf/03tn013.pdf.
[5] Ellison R J, Fisher D A, Linger R C. An approach to survivable systems //NATO IST Symposium on Protecting Information Systems in the 21st Century. 1999. http://www.sei.cmu.edu/community/easel/pdfs/nato1.pdf.
[6] Firesmith D G. Engineering security requirements
[J]. Journal of Object Technology, 2003. http://www.jot.fm/issues/issue_2003_01/column6/.
[7] Abrahamsson P, Salo O, Ronkainen J. Agile software development methods
[M]. Espoo: Review and Analysis VIT Publications 478, 2002.
[8] 李 匀.网络渗透测试——保护网络安全的技术、工具和过程
[M].北京:电子工业出版社,2007.
/
| 〈 |
|
〉 |
