• 제목/요약/키워드: software assurance

검색결과 192건 처리시간 0.026초

국제표준에 기반한 KASS 개발보증레벨 할당 (Allocation of Design Assurance Level for KASS Based on International Standards)

  • 배동환
    • 한국항행학회논문지
    • /
    • 제20권1호
    • /
    • pp.1-7
    • /
    • 2016
  • 국토교통부는 2014년부터 한국형 위성보강항법시스템 (SBAS; satellite based augmentation system)인 KASS (Korea augmentation satellite system) 개발 구축 사업을 진행 중이다. KASS는 실제 운영 중 문제가 발생할 경우 인명 및 재산피해와 연결될 수 있어 시스템 개발을 위한 안전성 평가가 매우 중요하다. 안전성 평가의 핵심은 위해 식별과 심각도 판정에 따른 개발보증레벨 (DAL; design assurance level) 할당이다. 본 연구에서는 항공시스템의 안전성 평가 방법론을 제시하는 국제표준인 SAE (society of automotive engineers) ARP4761 (aerospace recommended practice)을 기반으로 KASS 및 그 하위시스템에 대해 개발보증레벨 할당을 수행한다. 이것은 전체 시스템 안전성 평가의 첫 단계이므로 향후 KASS 개발 구축 사업의 안전성 평가에 활용될 수 있다.

철도시스템 소프트웨어 변경영향 분석을 위한 자동화 도구 개발 (Implementation of Automatic Tool for S/W Change Impact Analysis in Railway System)

  • 조현정;황종규;김용규
    • 전기학회논문지P
    • /
    • 제58권2호
    • /
    • pp.95-100
    • /
    • 2009
  • Recent advances in computer technology have brought more dependence on software to railway systems. Hence, the safety assurance of the vital software running on the railway system is very critical task and yet, not many works have been done. While much efforts have been reported to improve electronic hardware's safety, not so much systematic approaches to evaluate software's safety. In this paper, we suggested an automated analysis tool for S/W change impact in railway system, and presented its result of implementation. The analysis items in the implemented tool had referred to the international standards in relation to the software for railway system, such as IEC 61508 and IEC 62279. In these international standards, 'change impact analysis' for railway system S/W has to be required mandatorily. The proposed tool can be utilized at the assessment stage and also the software development stage.

소프트웨어 품질보증(SQA) 지원 패키지 개발 (Development of Support Package for the Software Quality Assurance)

  • 유충재;한혁수
    • 정보처리학회논문지D
    • /
    • 제11D권5호
    • /
    • pp.1105-1122
    • /
    • 2004
  • 소프트웨어 품질 개선과 관련된 조직 및 기업들의 노력들은 소프트웨어 생산성과 품질을 어느 정도 향상시켰지만 근본적인 해결 방안이 되지 못하여왔다 이와 같은 결과는 인력과 기술보다는 프로세스의 제도화의 부족에서 기인한다(1). 최근에는 프로세스 또는 작업 산출물이 명시된 요구사항과 계획, 표준을 따르게 하여 프로세스와 산출물을 가시적으로 관리하는 프로세스 품질보증을 통한 품질의 향상을 시도하는 움직임이 활성화되고 있으며, 이와 관련된 표준들과 모델들이 제시되고 있다. 하지만 관련 표준들과 모델들에서 제시된 내용은 추상적이며, 이를 적용하는데 필요한 세부적인 절차나 방법, 관련 산출물 등에 대해 기술하고 있지 않다. 따라서 표준 및 모델에서 제시하는 내용을 도입하고자 하는 조직들은 관련 표준의 전체 구조 및 내용을 숙지하고 받아들이기 위한 긴 노력과 많은 공수를 들여야만 품질에 대한 해당 조직의 목적 및 목표를 충족시킬 수 있는 소프트웨어 품질보증 활동 프로세스를 확립할 수 있다. 이에 본 연구에서는 조직들이 보다 편리한 방법으로 체계적이고 견고한 품질 보증 활동 프로세스를 구축할 수 있도록 지원하기 위한 패키지를 개발하였다. 본 연구에서 개발 된 패키지는 CMM/CMMI, ISO15504, ISO12207등의 관련 표준에서 기술하고 있는 품질보증 활동과 소프트웨어 프로세스 전 주기에 대한 내용의 분석, 기존연구의 분석 및 구조화, Best Practice 평가 및 분석의 과정을 통해 소프트웨어 품질보증 활동을 체계적이고 구조적으로 지원할 수 있는 소프트웨어 품질보증 지원 패키지이다. 개발된 패키지를 활용하면, 조직들은 조직의 여건 및 특성, 그리고 프로젝트의 성격에 맞도록 필요한 조정만을 통하여 품질보증 프로세스를 확립할 수 있다. 개발 된 패키지의 효율적인 활용이 내조직의 소프트웨어 품질보증 구축에 투입되는 공수 및 어려움을 줄일 것으로 기대된다.

Software Quality Metrics를 이용한 공학용 전산 프로그램의 품질특성 측정 (Quality Evaluation of Engineering Computer Programs Using Software Quality Metrics)

  • 조문성;남지희
    • 품질경영학회지
    • /
    • 제25권4호
    • /
    • pp.115-130
    • /
    • 1997
  • SQM (Software Quality Metrics) is a methodology whose primary objective is the measurement of compliances to requirements using a set of software life cycle properties called quality factors, which is based on the hierachical relationshiips between factors, criteria and elements. For this study, two factors (Correctness, Maintainability) and five criteria were selected. In addition, several tens of quality elements were developed to su, pp.rt them. Qualities of three computer programs which are being used for engineering purpose were measured. As a result, it is concluded that SQM is a valuable method for continuously monitoring the pulse of software quality development and that it can be used as a tool for software quality assurance.

  • PDF

열차제어 S/W 안전성 평가를 위한 절차 및 관리 방안 연구 (Study on Procedure & Management for Railway Signaling S/W Safety Assessment)

  • 조현정;황종규;김용규
    • 한국철도학회:학술대회논문집
    • /
    • 한국철도학회 2008년도 추계학술대회 논문집
    • /
    • pp.1237-1242
    • /
    • 2008
  • Recent advances in computer technology have brought more dependence on software to train control systems. Hence, the safety assurance of the vital software running on the railway system is very critical task and yet, not many works have been done. While much efforts have been reported to improve the safety of electronic hardware, not so much systematic approaches to evaluate the safety of software, especially for the vital software running on board train controllers. In this paper, we propose the guide line of actually applicable software safety assessment in train control systems. And we demonstrate the results of developing a new tool based on web system version for software assessment management.

  • PDF

항공용 소프트웨어 안전성 및 개발시 주의사항에 대한 고찰 (A Study on Safety of Airborne Software and Considerations during Development)

  • 이백준;최종연;남기욱
    • 한국항공운항학회지
    • /
    • 제24권2호
    • /
    • pp.81-85
    • /
    • 2016
  • It is recognized that safety is a key point of technical competency. Its adoption is widely spread in development of products and it is essentially necessary in aerospace industry because airborne system and equipment are used complex high-technology and implemented systematic performance using software. This study reviews system safety assessment, development assurance level, airborne software, RTCA DO-178 process, and considerations & pitfalls in software development.

열차제어 S/W 변경영향 분석을 위한 방법 연구 (The Method of Change Impact Analysis for Railway Signaling S/W)

  • 조현정;황종규
    • 한국철도학회:학술대회논문집
    • /
    • 한국철도학회 2009년도 춘계학술대회 논문집
    • /
    • pp.2044-2049
    • /
    • 2009
  • Recent advances in computer technology have brought more dependence on software to railway signaling systems. Hence, the safety assurance of the vital software running on the railway signaling system is very critical task and yet, not many works have been done. While much efforts have been reported to improve electronic hardware's safety, not so much systematic approaches to evaluate software's safety. In this paper, we suggested an automated analysis tool for S/W change impact in railway signaling system, and presented its result of implementation. The analysis items in the implemented tool had referred to the international standards in relation to the software for railway signaling system, such as IEC 61508 and IEC 62279. In these international standards, 'change impact analysis' for railway signaling system S/W has to be required mandatorily. The proposed tool can be utilized at the assessment stage and also the software development stage.

  • PDF

The Importance of Ethical Hacking Tools and Techniques in Software Development Life Cycle

  • Syed Zain ul Hassan;Saleem Zubair Ahmad
    • International Journal of Computer Science & Network Security
    • /
    • 제23권6호
    • /
    • pp.169-175
    • /
    • 2023
  • Ethical hackers are using different tools and techniques to encounter malicious cyber-attacks generated by bad hackers. During the software development process, development teams typically bypass or ignore the security parameters of the software. Whereas, with the advent of online web-based software, security is an essential part of the software development process for implementing secure software. Security features cannot be added as additional at the end of the software deployment process, but they need to be paid attention throughout the SDLC. In that view, this paper presents a new, Ethical Hacking - Software Development Life Cycle (EH-SDLC) introducing ethical hacking processes and phases to be followed during the SDLC. Adopting these techniques in SDLC ensures that consumers find the end-product safe, secure and stable. Having a team of penetration testers as part of the SDLC process will help you avoid incurring unnecessary costs that come up after the data breach. This research work aims to discuss different operating systems and tools in order to facilitate the secure execution of the penetration tests during SDLC. Thus, it helps to improve the confidentiality, integrity, and availability of the software products.

현대 무기체계 소프트웨어 개발 사례 분석을 통한 품질개선 방안에 대한 연구 (An Investigation into Improving the Quality of Modern Weapon System Software Products: a Case Study)

  • 최태윤;이효진
    • 시스템엔지니어링학술지
    • /
    • 제8권2호
    • /
    • pp.19-25
    • /
    • 2012
  • As modern weapon systems have evolved into embedded software systems, the capability to develop, install, and maintain high-quality software products is becoming increasingly valuable in today's competitive aerospace and defense industry. It is desirable, especially for government-contracted projects whose end-users are military personnel, that specific types of software quality elements are assured early during product development; namely, functionality and usability. Motivated by this need to approach improving software quality from a user's perspective, this paper presents a case study that analyzes system-level software integration testing results for a weapon system indigenously developed in the Republic of Korea. Quantitative data, such as software defect ratios and configuration change rates, are computed to observe meaningful trends with respect to functionality - represented by tests designed to verify the system's electrical signal interfaces - and usability, which is evaluated in terms of how often the initial human-computer interface had to be re-designed. Insights gained from these exercises are subsequently presented as a set of "lessons learned" to take into account when developing new software items for complex weapon systems.

A Prototyping Framework of the Documentation Retrieval System for Enhancing Software Development Quality

  • Chang, Wen-Kui;Wang, Tzu-Po
    • International Journal of Quality Innovation
    • /
    • 제2권2호
    • /
    • pp.93-100
    • /
    • 2001
  • This paper illustrates a prototyping framework of the documentation-standards retrieval system via the data mining approach for enhancing software development quality. We first present an approach for designing a retrieval algorithm based on data mining, with the three basic technologies of machine learning, statistics and database management, applied to this system to speed up the searching time and increase the fitness. This approach derives from the observation that data mining can discover unsuspected relationships among elements in large databases. This observation suggests that data mining can be used to elicit new knowledge about the design of a subject system and that it can be applied to large legacy systems for efficiency. Finally, software development quality will be improved at the same time when the project managers retrieving for the documentation standards.

  • PDF