Research On Risk Assessment And Control Method For Trusted Software

Software is playing a great part in this age of rapid development of computer and network technology. Along with its application in financial, military, economy and other important and sensitive areas is getting deeper, the need for the credibility of software have become more urgent. In recent years, the domain of trusted software has been becoming focus in people’s research. And risk management is becoming a significant part of the development process of high-quality software.In the development process of a software, the missing or failure of risk management can drop the credibility of the software. It depends on not only the use of new technology but also the use of scientific standard of risk management in the development process to develop high-quality trusted software. So, it is an important and urgent issue that could enhance the risk management in trusted software development process to improve the quality and credibility of software. The importance and necessity of risk management are fully recognized by the software industry. A large number of scholars and research institutes in the field of software engineering research have conducted extensive research in risk management of trusted software development process. At present, risk management is considered to be an effective means to reduce the high rate of failure in software projects. Effective rick management can be helpful to recover the potential problems of software projects in advance, to make strategies for risks in advance, to respond timely and to provide solutions rapidly when the risk occurs. As one of powerful tools for risk management, Bayes Networks is an effective way to deal with uncertainty. Therefore, this paper conducts the following work based on the above theory and method:1. In this paper, a risk management process for software development process is defined, which can achieve dynamic and sustainable risk management. 2. In this paper, software project risks are further divided into different risk indicators, and each risk indicator has different risk factors. The risk factors are used to measure the risk indicators, and then the software project risks can be measured.3. In this paper, a risk assessment methodology for trusted software, which is based on Bayes Networks and fuzzy comprehensive evaluation method, is proposed.4. According to the results of the measurement, the impact of risks can be learned. Finally, according to the impact of risks, the most influential risk indicators or risk factors can be found, thus the risk control and optimization strategy can be developed.In summary, this paper combines risk management process for software development process with Bayes Networks and fuzzy theory, in order to propose a risk assessment method. First of all, This paper evaluates the probability of risk factors which affect trusted software with Bayes Networks, and then this paper evaluates the comprehensive impact of risks with fuzzy comprehensive evaluation method. Finally, risk control and optimization can be implemented according to the evaluation result. The method in this paper can be used in risk management of software projects, and is a new tactic for developing high-quality trusted software.