Research On Software Process Risk Management Model Oriented To Trustworthy Software

In the information society,computer software is widely used in aerospace,military,finance,science and technology,economic management and other fields,it relates to the national economy and people's livelihood,plays an increasingly important role.Due to the increased financial losses and catastrophic events caused by software failures,the society has higher requirements on the level of software trustworthy.Because of software development and running environment gradually becomes from the static and gradually to dynamic and open,the local area network evolves into the Internet and mobile Internet network,as well as the popularization of large-scale applications in cross-industry organizations and knowledge fields,leads to the uncertainty of software development process and the difficulty of risk control,reduces the quality of software products and affects the level of software trustworthy.In this paper,the whole life cycle of software is divided into two stages: software development process and software operation and maintenance process.In terms of software product(operation and maintenance)trustworthiness,by analyzing the characteristics of software product trustworthiness and the ISO/IEC25010 software quality standard,five attributes are selected to describe the influencing factors of software product trustworthiness,which includes security,hazard prevention,reliability,survival and fault tolerance,the corresponding software trustworthiness evaluation index system is established.In terms of the software development process,software process is divided into project approval,planning,analysis,design,development(programming)and testing,it defines the meaning of process entity trustworthiness,process product trustworthiness and process behavior trustworthiness.Considering the factors of software project schedule,software quality and software cost,it establishes the evaluation index system of software process trustworthiness from the three perspectives,which includes process entity trustworthiness,product trustworthiness and behavior trustworthiness.According to various activities of software development process,the internal logical relations among software product trustworthiness,software process trustworthiness,software process trustworthiness and product trustworthiness are systematically analyzed.Based on the theoretical hypothesis : the action mechanism of software process trustworthiness affecting software product trustworthiness,this paper constructs the mapping model for software process and product trustworthiness based on PLS-SEM,it determines the risk factors affecting software process trustworthiness.The BP neural network is optimized by genetic algorithm(GA)to improve the learning efficiency of BP neural network and the reliability of credible risk assessment of software process.The mapping model between software process risk factors and software product trustworthiness is established.Combined with GA-BP optimization model and PDCA model,this paper proposes the dynamic software process risk management model and the development process risk management model for software trustworthiness,which provide a more operable method for trustworthy software process risk management and trusted process improvement.