Reserch On Security Testing Technology Of Space Armament Software

With the rapid development of the modern space technology and computer science, the software utilized in space systems plays a role more and more important. The quality of software determines to a great extent the quality of the overall space armament products. So it becomes urgent to solve the problems in space armament product quality, especially the problems about software security. Software testing is an important way to assure the quality of software, which can discover flaws in the software as many as possible. As to space armament software, strengthening the security testing work is a fundamental and effective method to assure its security.Nowadays, in the space realm of China, there are very few research jobs done in software security. This thesis begins with the situation of the security testing for space armament software, and studies the theory, testing methods and testing technology of such software. Based on analyzing the security work in every stage of the software life cycle, this thesis suggests the method and flow chart of the security testing for space armament software.The security standard"GJB 5369-2005 safe subset of C language for space armament software"is deeply researched and the security of this C language coding criteria is analyzed in this thesis. Selecting some representative and important parts of the criteria, it analyzes the potential security trouble of C language programming which doesn't match the criteria in three aspects: data type, expression and control of program flow.Auto test tool for code censor based on GJB 5369-2005 is designed in this thesis. It implement that 138 rules can be censored automatically in GJB 5369-2005 safe subset of C language for space armament software. The code censor tool is designed based on the concept of compiler. The software structure is mainly composed of several function modules: file input, character stream input, preprocess, accidence analysis, syntax analysis and error analysis. The actual test and experimental results show that the design is reasonable and function well.