基于行为声明的可信性测试方法与可信度计算研究
|
摘要
针对软件行为的可信性进行了测试方法与度量标准的研究.在测试方法上,通过在软件开发阶段植入可信埋点模块的方式获取行为的动作路径,以"言行一致"思想为依据,将软件的行为声明与动作路径做比对,得到可信性测试的新方法.在判定标准上针对动作路径提出显性可信性判断指标和隐性可信指标,在度量上提出基于Kmeans聚类的隐性指标判定模型,并将此应用在单一行为的可信度计算以及相似行为的可信甄别上.通过实验验证了方法的可行性,为可信性测试提供了新的思路.
Based on Application Behavior Declaration(ABD), we proposed a new method for credibility calculation. It is based on the idea of "words and deeds". In the software development phase, tracking module is implanted to extract the action path of the behavior. Then, we compare the behavior declaration of the software with the action path to achieve the purpose of evaluating whether the behavior is credible. Explicit and implicit indicators are proposed for judgment, as well as an implicit indicators model based on K-means clustering. This model is applied to the credible calculation of single behavior and the credible discrimination of similar behaviors. Experiments prove that this solution is feasible for providing new ideas for credibility testing.
Based on Application Behavior Declaration(ABD), we proposed a new method for credibility calculation. It is based on the idea of "words and deeds". In the software development phase, tracking module is implanted to extract the action path of the behavior. Then, we compare the behavior declaration of the software with the action path to achieve the purpose of evaluating whether the behavior is credible. Explicit and implicit indicators are proposed for judgment, as well as an implicit indicators model based on K-means clustering. This model is applied to the credible calculation of single behavior and the credible discrimination of similar behaviors. Experiments prove that this solution is feasible for providing new ideas for credibility testing.
引文
1沈昌祥,张焕国,王怀民,等.可信计算的研究与发展.中国科学:信息科学,2010,40(2):139-166.
2沈国华,黄志球,谢冰,等.软件可信评估研究综述:标准、模型与工具.软件学报,2016,27(4):955-968.[doi:10.13328/j.cnki.jos.005024]
3沈昌祥,张焕国,冯登国,等.信息安全综述.中国科学E辑:信息科学,2007,37(2):129-150.
4 Yu XJ,Jiang GZ,Wang P,et al.Research on application’s credibility verification based on ABD.Wuhan University Journal of Natural Science,2016,21(1):63-68.[doi:10.1007/s11859-016-1139-8]
5吕海庚.基于行为声明软件可信性测试方法的研究[硕士学位论文].北京:北京工业大学,2016.
6车乐林.基于行为声明的移动应用可信性测试的研究与应用[硕士学位论文].北京:北京工业大学,2017.
7刘妙晨.基于行为声明的REST风格软件可信性测试的研究与应用[硕士学位论文].北京:北京工业大学,2017.
8韩冬冬,韩永飞,张俊华.应用软件可信性混合度量的设计和应用.电脑与信息技术,2013,21(3):31-33,45.[doi:10.3969/j.issn.1005-1228.2013.03.011]
9熊刚,兰巨龙,胡宇翔,等.基于可信度量的网络组件性能评估方法.通信学报,2016,(3):117-128.
10赵玉洁,罗新星.Web软件可信性的模糊评价方法.计算机应用研究,2014,31(4):1072-1076.[doi:10.3969/j.issn.1001-3695.2014.04.028]
11綦磊升,张晓娜,门星火,等.基于模糊层次分析法的指挥信息系统仿真试验可信性评估.软件工程,2018,1(1):7-11.
12 Su D,Li J,Wang ZY.A method of dynamic trusted researching of software behavior and its trusted elements.Network Security Technology&Application,2013,(4):14-17.
13 Dugundji ER,Poorthuis A,Van Meeteren M.Modeling user behavior in adoption and diffusion of twitter clients.Proceedings of 2011 IEEE International Conference on Privacy,Security,Risk and Trust and 2011 IEEE Third International Conference on Social Computing.Boston,MA,USA.2011.1372-1379.
14 Gan T,Lin FH,Chen CJ,et al.User behaviors analysis in Website identification registration.China Communications,2013,10(3):76-81.[doi:10.1109/CC.2013.6488832]
2沈国华,黄志球,谢冰,等.软件可信评估研究综述:标准、模型与工具.软件学报,2016,27(4):955-968.[doi:10.13328/j.cnki.jos.005024]
3沈昌祥,张焕国,冯登国,等.信息安全综述.中国科学E辑:信息科学,2007,37(2):129-150.
4 Yu XJ,Jiang GZ,Wang P,et al.Research on application’s credibility verification based on ABD.Wuhan University Journal of Natural Science,2016,21(1):63-68.[doi:10.1007/s11859-016-1139-8]
5吕海庚.基于行为声明软件可信性测试方法的研究[硕士学位论文].北京:北京工业大学,2016.
6车乐林.基于行为声明的移动应用可信性测试的研究与应用[硕士学位论文].北京:北京工业大学,2017.
7刘妙晨.基于行为声明的REST风格软件可信性测试的研究与应用[硕士学位论文].北京:北京工业大学,2017.
8韩冬冬,韩永飞,张俊华.应用软件可信性混合度量的设计和应用.电脑与信息技术,2013,21(3):31-33,45.[doi:10.3969/j.issn.1005-1228.2013.03.011]
9熊刚,兰巨龙,胡宇翔,等.基于可信度量的网络组件性能评估方法.通信学报,2016,(3):117-128.
10赵玉洁,罗新星.Web软件可信性的模糊评价方法.计算机应用研究,2014,31(4):1072-1076.[doi:10.3969/j.issn.1001-3695.2014.04.028]
11綦磊升,张晓娜,门星火,等.基于模糊层次分析法的指挥信息系统仿真试验可信性评估.软件工程,2018,1(1):7-11.
12 Su D,Li J,Wang ZY.A method of dynamic trusted researching of software behavior and its trusted elements.Network Security Technology&Application,2013,(4):14-17.
13 Dugundji ER,Poorthuis A,Van Meeteren M.Modeling user behavior in adoption and diffusion of twitter clients.Proceedings of 2011 IEEE International Conference on Privacy,Security,Risk and Trust and 2011 IEEE Third International Conference on Social Computing.Boston,MA,USA.2011.1372-1379.
14 Gan T,Lin FH,Chen CJ,et al.User behaviors analysis in Website identification registration.China Communications,2013,10(3):76-81.[doi:10.1109/CC.2013.6488832]