An Analyzer-Based Software Security Measurement Model for Enhancing Software System Security

Software security has become an increasingly important issue for computer and software system. Secure holes of software system may cause a company out of business and even destroy social normal operation. How to improve software security becomes a critical issue in software development process. In this paper, utilizing the static program analyzer and dynamic simulation analyzer to collect metrics, an Analyzer-based Software Security Measurement (ASSM) model is proposed. Applying ASSM model, the secure flaws of software system can be identified clearly. And, the security defects and security holes of software system can be efficiently controlled and improved. The security of software system can be increased concretely.