（中航工業西安飛行自動控制研究所，710065）（西安衛星測控中心，710043）
摘要：隨著安全關鍵系統規模及復雜性的增加，如何構建高可信的安全關鍵軟件成為研究熱點，采用模型驅動的開發方法可以提高開發效率，保證安全關鍵軟件的質量。而質量是由軟件體系結構決定的。首先介紹了軟件框架技術，它能有效實現大粒度軟件復用，并闡述了特定領域的可復用軟件體系結構設計方法和開發過程。為了進一步提高軟件重用性和建立理想的軟件體系結構，對安全關鍵領域的兩種軟件體系結構進行了基本分析，著重介紹了一種分區技術，并對ARINC653標準的架構進行了簡述。最后分析了模型化開發方法，并對未來安全關鍵領域的軟件技術發展進行展望。
關鍵詞：安全關鍵軟件；高可信；復用；軟件體系結構；模型驅動
Design methodology forsafety-critical software of high confidence
Min Jiang, Qingtian Ma
（AVIC Xi'an Flight Automatic Control Research Institute,710065）
（ChinaXi'an Satellite Control Center,710043）
Abstract: As the size and complexity of safety-critical systems increase, how to build a high confidence safety-critical software become research focus. Using the model-driven development approach can improve development efficiency, and ensure the quality of safety-critical software. While the quality characteristic is determined by the software architecture. Firstly, the software framework technology is introduced, which can effectively implement large-scale software reuse. Then, design methods of domain-specific reusable software architecture and the development processes are described. In order to further improve software reusability and establish the ideal software architectures for safety-critical areas, two software architectures are described, especially a partitioning technology, and the ARINC653 standards based architecture are outlined. Finally, the methodsof modelingdevelopment are analyzed, and then looking to the future development of the software technology forsafety-critical area.
Key words:safety-critical software；high confidence；reuse；software architecture；model driven
參考文獻（References）
（1）楊志斌, 皮 磊, 胡 凱. 復雜嵌入式實時系統體系結構設計與分析語言:AADL. Journal of Software, Vol.21, No.5, May 2010, pp.899−915
（2）楊芙清，梅宏，李克勤.軟件復用與軟件構件技術.電子學報，1999,27(2): 68~75
（3）劉瑜，王立福，張世艱.軟件框架開發過程研究.計算機工程與應用.2004.2 26~28
（4）于振華,蔡遠利. 特定領域軟件體系結構研究[J ] . 微電子學與計算機,2004 ,21 (7) :66 - 69.
（5）Mohamed E.Fayad等著，姜曉紅等譯.特定領域應用框架:行業的框架體驗.電 子 工業 出版社，2004.8
（6）Rushby, John. "Separation and integration in MILS (The MILS Constitution)."SRI International (2008).
（7）Cho, Hyeonjoong, Binoy Ravindran, and E. Douglas Jensen. "An optimal real-time scheduling algorithm for multiprocessors." Real-Time Systems Symposium, 2006. RTSS'06. 27th IEEE International. IEEE, 2006.
（8）Tokar, Joyce L. "Space & Time Partitioning with ARINC 653 and pragma profile." ACM SIGAda Ada Letters. Vol. 23. No. 4. ACM, 2003.
（9）Maiden, Neil AM, et al. "Model-driven requirements engineering: synchronising models in an air traffic management case study." Advanced Information Systems Engineering. Springer Berlin Heidelberg, 2004.
作者簡介:
姜敏,女,工程師,主要研究領域為安全關鍵嵌入式軟件體系結構設計、基于模型的軟件設計與驗證，近年來參與多個國防重大項目的軟件開發工作。
