A New Approach To Measure Software Security
Wei Han, Hairong Ye, Zuohua Ding · 2010
Abstract—A new method is proposed to measure software system security. Each component can be characterized by a composite net which combines the features of Finite State Machine and Operation Diagram. A fuzzy number is introduced to this net to represent uncertain elements that might affect the software security, and thus we construct Security Function for each component. The whole system Security Index is calculated based the Reliability Graph and the Security Function for each component, where Reliability Graph is used to reconstruct the component relationship of the system.