As the rapid developing of the theory and techniques in Trustworthy Software, a proper approach to evaluate the effects of all the trustworthy-approve methods and techniques is needed. At the same time, the outcomes of trustworthy evaluation system are import reference to final users, who need an acceptable way to choose specific software from the crowed. In this thesis, an evaluation system based on software weakness analysis and testing assessment is raised, which is used to evaluate the degree of software's trustworthiness during the developing cycle. In this evaluation system, we focus trustworthiness on six aspects, and based on the feature of exposition phrase, these six aspects is classified to two groups. Here we call them Model-Accessible aspects and Product-Accessible aspects. For Model-Accessible aspects, start from the weakness exposed in software design model, and evaluate the trustworthiness of whole software by analyzing and classify the weakness and attack patterns. For Product-Accessible aspects, examine the software's performance by extended software testing. During the process of evaluation, statistic subject opinion and trends will be considered, so the mental influence could be in count.Using this customized system, engineers could be sense of the trustworthiness of software products quantitatively in both software developing phrase and developed phrase. Earlier problem inspection will induce earlier solution, which will level up the software developing efficiency and reduce unnecessary cost. Mean while, this quantitative evaluation provides import references to software cataloging, classifying and choosing. No matter evaluation demotion or effects, this system is definitely impressive among the existing. |