An Evidence and Attribute model Based Software Credibility Assessment Tool

(1)

EMSOFT NUAA

Hua Zhou

Trustie Manager

An Evidence and Attribute model Based

Software Credibility Assessment Tool

(2)

�

Background

�

Terms

�

Technical-solution

�

Advantages

�

Scenarios

�

Conclusions

2

(3)

�

Trustie

�

_{863:High trusted software tools and integrated}

production environment

�

_{ShenZhow Digital :Trustie based}

software production line

�

TrustieManager

�

_Intention

_{: A management system of the}

credibility assessment of software

�

_Base

_{:Trustie specifications ; Evidence and}

Attribute model

(4)

�

Background

�

Terms

�

Technical-solution

�

Advantages

�

Scenarios

�

Conclusions

4

(5)

�

Trustie

�

_{Credible national software production resource}

sharing and collaborate environment

�

Trusted software

�

_{If the behavior of a software system is always the}

some as the expected behavior of the user.

�

Software credibility

�

_{The ability of software to provide expected safe}

and reliable services.

(6)

�

Credible attribute

�

_{A set of properties used to describe and evaluate}

the credibility of software system.

�

_{Software credible attributes can be refined into a}

credible multi-level sub-attributes.

�

Credible evidence

�

_{Software-related information such as data,}

documents or other information which can reflect

the credible properties of the software system.

6

(7)

�

Credibility level

�

_{Scale in a range of values can be used in}

accordance with the explicit or implicit demand

for the grading assessment of the credibility of

the software, which is called the credibility level.

�

Credibility assessment

�

_{Determine whether a particular software product}

already achieve a certain confidence level of

activity, known as the software credible level

assessment, referred to as the software credible

assessment.

(8)

�

Background

�

Terms

�

Technical-solution

�

Advantages

�

Scenarios

�

Conclusions

8

(9)

�

Assessment process

Technical-solution

Credible Credible Credible Credible Evidence Evidence Evidence Evidence Indicators IndicatorsIndicatorsIndicators

Credibility Credibility Credibility Credibility Assessment AssessmentAssessmentAssessment

Credibility Credibility Credibility Credibility

Level Level Level Level Software

Software Software Software Resources Resources Resources Resources

Credibility Credibility Credibility Credibility

Attributes Attributes Attributes Attributes

(10)

�

Trustie Manager

10

Technical-solution

Software Resources management

Configuration management

Attributes model management Evidence management

(11)

�

Trustie Manager

�

_{Software Resources management}

Technical-solution

Software Resources management

Support the management of basic information of software resources (components, applications, services, etc.)

(12)

�

Trustie Manager

�

_{Evidence management}

12

Technical-solution

Software Resources management

(13)

�

Trustie Manager

�

_{Evidence management}

13

Technical-solution

Software Resources management

Evidence model management Evidence data management

(14)

�

Trustie Manager

�

_{Evidence model management}

� Different types of resources may have different systems of evidence. � The system allows a configuration to load the model, and accordingly

generate evidence editing interface.

14

Technical-solution

Software Resources management

Attributes model management Evidence model management

(15)

�

Trustie Manager

�

_{Evidence data management}

� Access the management of specific evidence data. � Various types of evidence data can be stored.

15

Technical-solution

Software Resources management

Attributes model management Evidence model management

(16)

�

Trustie Manager

�

_{Attributes model management}

� _{Manager the credible attribute system of the software products.} � _{The highest level is the software's overall reliability}

� _{The lower is the credibility of various sub-attributes.}

16

Technical-solution

Software Resources management

(17)

�

Trustie Manager

�

_{Configuration management}

� _{Get the credibility attributes system by reading a configuration in the} system.

� _{Allows users to directly assess the overall credibility of the software} from the evidence;

� Allowed assessing the levels of the sub-attributes firstly.

17

Technical-solution

Software Resources management

(18)

�

Trustie Manager

�

_{System data relationship}

18

Technical-solution

User User User User Products Products Products Products Evidence data Evidence data Evidence data Evidence data Stage model Stage modelStage modelStage model

Evidence model Evidence modelEvidence modelEvidence model

Attribute model Attribute modelAttribute modelAttribute model

Assessment system Assessment Assessment Assessment system system system configuration

configurationconfigurationconfiguration Result

ResultResultResult

Configuration Configuration Configuration Configuration

(19)

�

Trustie Manager

�

_{System data relationship}

� A user can assess a resource, one or more users can browse a variety information of resources participated.

� _{A resources corresponding with a configuration, Including the} following four aspects: the stage model configurations, credible

evidence model configurations, credible attribute model configuration, assessment system configuration.

19

(20)

�

Trustie Manager

�

_{System data relationship}

� A participating resources in a configuration can submit a credible evidence data, including the value of the specific evidence.

� _{A participating resources with an evidence data and an assessment} configuration can obtained an assessment conclusion.

20

(21)

�

Background

�

Terms

�

Technical-solution

�

Advantages

(22)

�

Challenges

�

_{Diverse needs of assessment}

�

_{Fixed attribute models or evidence models}

�

_{Software life cycle.}

�

_{Background of professional knowledge}

22

(23)

�

Our innovations

�

_{Can assess the credibility in different life cycle .}

�

_{Both evidence model and the attribute are customizable.}

�

_{Users can easily customize their own assessment of the}

assessment model to adapt to the diversity of needs.

�

_{Not only support manual assessment but also support}

automatic calculation base on sub-attributes and relevant

evidence. Which can be done in flexible and diversified

ways.

23

(24)

�

Background

�

Terms

�

Technical-solution

�

Advantages

�

Scenarios

�

Conclusions

24

(25)

�

Project finished

�

End of the main stage

�

After user feedback

�

After a component is formally changed

25

(26)

26

(27)

�

Background

�

Terms

�

Technical-solution

�

Advantages

(28)

� Assessment objects can also be a component of software or other to

adapt to the diverse needs of the assessment object.

� Resource evidences organized in stages, to achieve a variety of browser

view of the evidence, and supporting software assessment in different stages of life cycle.

� Evidence model, attribute model can be customized to meet a variety

requirement of software resources.

� We can automatically calculate the assess value of the parent property

by the self defined classification system base on the assess result of the sub-properties, which facilitate the automated generation of assessment results.

28

(29)