以證據為基礎的軟體認證方式

Evidence-Based Software Verification and Validation

黃韋豪(Wei-Huo Huang)

指導教授 ： 范金鳳

元智大學/工程學院/電機與資訊工程研究所/碩士(1995年)

摘要

驗證與確認工作，主要包含測試及審查兩方面。但測試不能涵蓋全部可能
範圍，所以審查作業就十分重要。而審查主要仰賴驗證者的主觀判斷且缺
乏一個有系統的整合方法，同時，對於驗證與確認工作的品質亦缺乏一個
指標。有鑑於此，本論文提出了一套軟體認證的新方法，稱之為以證據為
基礎的軟體認證方式(Evidence-Based Software Verification and
Validation)。在以證據為基礎的軟體認證方式中，首先將證據分為：字
串或稱文法(Syntax)，語意(Semantic)，完整性(Complete)以及安全性(
Safety)四個類型。其中，字串類型是判斷一個基本物件(Entity)是否出
現，語意類型是判斷基本物件是否真正做到，完整性類型是判斷該基本物
件是否完整，而安全性類型證據則檢視軟體是否存在造成不安全的因素。
本論提出這四種類型證據在發展各階段中採用的擷取方式以及證據型式。
同時，擷取出的證據，除了可用於評估驗證的工作品質外，亦可對軟體的
品質予以評估。我們將所有擷取得到的證據以證據庫型式儲存起來，使得
這些證據可以更方便的整合應用以利於檢索、追溯之用。最後，我們以一
個模擬系統的實例來說明這套方法論的可行性及有效性。

關鍵字

證據 ； 型式 ； 內容 ； 完整 ； 安全 ； 品質指標圖

並列摘要

The major tasks of Software Verification and Validation includes
testing and review. Testing can not cover all possibilities, so
review is very important. But review depends on the subjective
judgement of the verifiers ,and thus it is hard to judge its
quality. Moreover, current verification and validation practice
is lacks of systematic and integrated methods. This thesis
proposes a new software verification and validation methodology,
called Evidence-Based method. In this Evidence-Based Software
Verification and Validation method, we firsts divided the
evidences into four categories, that is, syntactic, semantic,
complete and safety types of evidence. The syntax
evidencedetects the occurrences of a given entity, the
semantic evidence determineswhether a given entity actually
performs its objectives, the complete evidence determines
whether a phase in life cycle complete the requirements of the
previous phase, and the safety evidence detects if there exist
any unsafe factors in the software. The thesis presents a
procedure to obtain these four types of evidence in each phase
of the software life cycle, also the formats of thesevidences
have been developed. According to the acquired evidences,a
quantitative scheme is developed to evaluate the quality of the
verification and validation tasks as well as that of the
evaluated software. Evidence database is then built to keep the
four types of evidence to facilitate further reuse and
applications. A simulated system using the proposed approach
has been constructed to demonstrate its feasibility and
effectiveness.

並列關鍵字

Evidence ； Syntax ； Semantic ； Complete ； Safety ； Quality Chart