CAJ | 학술논문

安全需求的获取是确保软件安全性的关键因素。为有效地获取软件的安全需求，在分析安全质量需求工程SQUARE模型的基础上，改进了该模型的执行步骤，制定了安全需求的分类标准，给出了安全需求文档的XML模式定义。应用改进的SQUARE模型对高校学生成绩管理系统进行安全需求获取，并将安全需求文档以XML格式进行存储，实现了安全需求的跨平台通用。
안전수구적획취시학보연건안전성적관건인소。위유효지획취연건적안전수구，재분석안전질량수구공정SQUARE모형적기출상，개진료해모형적집행보취，제정료안전수구적분류표준，급출료안전수구문당적XML모식정의。응용개진적SQUARE모형대고교학생성적관리계통진행안전수구획취，병장안전수구문당이XML격식진행존저，실현료안전수구적과평태통용。
The eliciting of security requirement is a key factor to ensure software's security .To obtain the software's security requirement effectively , on the basis of the analysis of the Security Quality Re-quirements Engineering model , the steps of the SQUARE model was improved , and the classification standard about security requirements was defined , and the XML Schema definition of security require-ments document was presented .This thesis applied the Light -SQUARE model to university student Score Management System and elicited its security requirement , and stored the security requirement with XML format , realized cross-platform usability of the security requirement .