一句话：从软件工程视角讨论如何通过保证案例与多源证据论证安全关键软件对法规标准的合规性。
软件日益中介日常活动，监管和标准机构随之制定安全、安保与隐私等规范，软件开发的合规性成为关键要求。本文从软件工程视角讨论如何构建合规主张与论证，通常以保证案例（assurance case）形式记录，并链接测试用例、验证证明、人工判断等证据。其核心挑战在于：证据可来自不同方法，质量与可信度各异，需要将多源证据组织成可被人类评审的、有根据的论证。作者主张应依据充分论证的方法谨慎构建安全关键系统，并将这些论证在保证案例中清晰表达，最终由人类判断其可接受性。该报告为安全、保证与可靠性的工程实践提供了概念框架与研究方向。
From financial services platforms to social networks to vehicle control, software has come to mediate many activities of daily life. Governing bodies and standards organizations have responded to this trend by creating regulations and standards to address issues such as safety, security and privacy. In this environment, the compliance of software development to standards and regulations has emerged as a key requirement. Compliance claims and arguments are often captured in assurance cases, with linked evidence of compliance. Evidence can come from test cases, verification proofs, human judgement, or a combination of these. That is, we try to build (safety-critical) systems carefully according to well justified methods and articulate these justifications in an assurance case that is ultimately judged by a human.
DOI 原文 ·
@inproceedings{paperbot7037,
title = {On safety, assurance, and reliability: a software engineering perspective (keynote)},
author = {Marsha Chechik},
booktitle = {FSE},
year = {2022},
doi = {10.1145/3540250.3569443}
}