威胁模型驱动的软件安全评估和测试方法的研究.pdf

ABSTRACT it aSthe has vulnerbalifiesandhasbeen software Poor-quality many recognized causeofthe root increasing security exponentiallycomputer tothemethodsand of software extraattention techniquesensureing security pay thesoftware the of the improving during developmentprocess．Forpurpose trustworthinessof shouldconsiderthe as software，developers securityproblemsearly as inthesoftware toenSUle possible developmentlifecycle．Specifically,how for and methodsbecomethecriticalissues software viaevaluation security testing securesoftware development． of Underthe ofthe ofNationalScienceFoundationChina support Project “AttackPatternBased Software Verification”， TrustworthyModeling，Evaluation，and weresearchedonthe ofmethodsofthreatmodeldrivensoftware techniques key evaluationand threat and modeling，threat security testing，includingrepresentation modeldrivensoftware evaluationand for security testing，attackpaRemrepository software evaluationand contributionsofthis assisting security testing．