软件工程回顾与关键实践：从安全到云计算

需积分: 9 156 浏览量更新于2024-07-31 收藏 1.81MB PDF 举报

本资源是一份关于软件工程的综合指南，包含了多个主题，旨在帮助读者深入理解与提升在该领域的专业技能。首先，"Design and Safety Assessment of Critical Systems" 由 Marco Bozzano 和 Adolfo Villafiorita 执笔，关注的是关键系统的设计和安全评估，这对于保障复杂系统的稳定性和安全性至关重要。接着，"Implementing and Developing Cloud Computing Applications" 由 David E. Y. Sarna 编写，探讨了云计算应用程序的开发与实施，反映了云计算技术在当今软件工程中的核心地位。 "Secure Java: For Web Application Development" 由 Abhay Bhargav 和 B.V.Kumar 合作，提供了关于如何利用Java进行安全web应用开发的深入指导，确保网络安全是现代软件工程的重要议题。"Scrum Project Management" 由 Kim H.Pries 和 Jon M. Quigley 执笔，介绍了敏捷项目管理方法 Scrum 的实践和应用，强调在快速变化的市场环境中项目的高效管理。 "Engineering Mega-Systems: The Challenge of Systems Engineering in the Information Age" 由 Renee Stevens 撰写，探讨了在信息时代大型系统工程所面临的挑战和解决方案，反映了系统集成在现代IT项目中的复杂性。此外，"Certified Function Point Specialist Examination Guide" 提供了功能点认证的专业考试准备材料，帮助软件工程师掌握项目估量的关键工具。 "Enterprise Systems Engineering: Advances in the Theory and Practice" 由 George Rebovich, Jr. 和 Brian E. White 联合编撰，关注企业级系统工程的理论和实践进展，强调了大型企业环境下的系统集成和架构设计。"Process-Centric Architecture for Enterprise Software Systems" 由 Parameswaran Seshan 深入解析了以流程为中心的企业软件系统架构，突出了过程导向的重要性。 "Secure and Resilient Software Development" 由 Mark S. Merkow 和 Lakshmikanth Raghavan 合著，重点关注软件安全和韧性，这是当前软件工程领域的重要趋势，以应对不断增长的安全威胁。最后，"Real-Life Applications of Soft Computing" 通过 Anupam Shukla, Ritu Tiwari, 和 Rahul Kaul 的案例研究，展示了软计算（如模糊逻辑、神经网络等）在实际软件开发中的应用。这份资源覆盖了软件工程的多个关键领域，从系统设计、安全到项目管理，再到技术实践和创新方法，为软件工程师提供了丰富的学习和参考材料。

List of Tables

Table 6.1 Peer Review Method .................................................................. 42

Table 6.2 Soἀware Design Checklist .........................................................51

Table 7.1 Soἀware Quality Activities ....................................................... 56

Table 7.2 SQA Process Audit Checklist .....................................................59

Table 8.1 Soἀware Conguration Audit Checklist .................................78

Table 9.1 Soἀware Subcontractor Scope of Development ..................... 84

Table 9.2 Soἀware Supplier/Subcontractor Checklist .............................89

Table 10.1 Soἀware Engineering Review Checklist ................................98

Table 10.2 SQA Database ........................................................................... 99

Table 11.1 Soἀware Engineering Audit Checklist .................................108

Table 12.1 Joint Technical Reviews ..........................................................117

Table 12.2 FAI Soἀware Checklist .......................................................... 128

Table 12.3 FCA/PCA Schedule ................................................................133

Table 12.4 FCA/PCA Responsibilities .................................................... 134

Table C.1 Documents ................................................................................188

Table C.2 Nonapplicable Documents ......................................................188

Table C.3 Plan to Support Soἀware Test ................................................192

Table C.4 Soἀware Formal Reviews ........................................................193

Table C.5 Plan for Monitoring Soἀware Suppliers................................193

Table C.6 COTS Soἀware Usage ..............................................................195

xvii

Preface

I have worked in systems engineering, soἀware development, soἀ-

ware conguration management, soἀware testing, and soἀware quality

assurance organizations for more than 30 years. My experience in these

selected elds has been somewhat dierent from that of most people. I

always wanted to experience the soἀware disciplines required in each area

of expertise. I know that many individuals or groups reading this book

will be surprised to know that successful soἀware engineering reviews

and audits are benecial to the success of soἀware industries and military

and aerospace programs. e commercial soἀware world can benet from

this book by helping companies realize that they can succeed in this crazy

and sometimes confusing soἀware market and by being aware that eec-

tive reviews and audits for soἀware will help them to be more successful.

I attended college and majored in business management with an empha-

sis in information systems, production and operations management,

quantitative analysis methods, statistical analysis, computer science, and

application programming. During this time, I worked for an aerospace

company and began my journey into soἀware development as a senior

systems analyst. I dove into soἀware requirements, soἀware design, code

and unit testing, conguration control, soἀware builds, soἀware deliver-

ies, and providing soἀware documentation supporting each area of exper-

tise. I have been involved in performing numerous soἀware engineering

reviews and audits to ensure compliance with contractual requirements.

In leading multiple soἀware engineering development teams, I continu-

ally tackled complex technical challenges to ensure that system/soἀware

engineering problems were addressed and resolved. e main objective of

the technical leadership role for soἀware design teams, through the use

of common soἀware tools for both UNIX® and Windows® platforms, was

to ensure that common soἀware tools were institutionalized. In order to

establish and implement common soἀware tools, the necessary capabili-

ties must be provided for teams to learn from other soἀware groups using

similar soἀware tools and processes. Adapting these new and proven tools

will decrease the soἀware build ow times from days to hours, so teams

can be more responsive to customer needs, issues, and concerns. Soἀware

metrics should be provided weekly and monthly to senior management

xviii • Preface

for problems and soἀware build time evaluations to ensure that issues are

addressed and resolved. e soἀware tasks for engineering reviews and

audits performed during the development lifecycle prior to deliveries and

formal audits will improve quality and execution.

Aerospace programs present challenges for personnel working in key

technical roles. An example is a replacement of key multiplexer computer

systems for the United States Air Force (USAF). Technical soἀware issues

are addressed and coordinated daily for the customer. Soἀware teams are

directed to capture soἀware baselines and ensure that engineering reviews

and audits for soἀware have been performed for installations of new soἀ-

ware baselines during test and integration activities.

My career culminated with moving to numerous military and aerospace

programs and being involved in the Capability Maturity Model Integration®

(CMMI®) activities for systems engineering and soἀware development. I

supported and participated in CMMI audit teams and performed CMMI

appraisals to certify military and aerospace soἀware programs for accom-

plishing Level 2 and Level 5 ratings for capability certications.

Summary

Before soἀware, military, and aerospace programs implement soἀware

engineering reviews and audits, it is important to understand the soἀware

development lifecycle. Chapters are included that dene methods for sys-

tems engineering, soἀware design, soἀware quality assurance, soἀware

conguration management, and soἀware suppliers/subcontractors. e

intent of this book is to ensure that soἀware engineering reviews and audits

are conducted and performed incrementally in soἀware development

schedules. e implementation of review and audit disciplines will benet

soἀware companies and military and aerospace programs and ensure that

formal audits (i.e., FAI, FCA, and PCA) are successful the rst time.

xix

Acknowledgments

In the last 30 years of working and gaining experience in soἀware indus-

tries and military and aerospace programs, I have been motivated to write

a book related to the understanding the importance of performing eective

soἀware engineering reviews and audits. My career as a soἀware engineer

has included designing, controlling, building, installing, and validating

soἀware, which is my passion. Before a company for which I work deliv-

ers soἀware to its customers, both in the United States and internation-

ally, I feel a sense of accomplishment that my soἀware has successfully

passed critical soἀware reviews and major formal audits. e experience I

gained working in multiple data centers for commercial banking, Hercules

Aerospace, Mini-System soἀware contractors, and the Boeing Company

for 30 years has given me the knowledge of numerous soἀware process

improvement activities. It is outstanding to work with the soἀware teams

with which I am associated. Senior management and soἀware managers

have always been a support to me, and I greatly appreciate their guidance.

is book has been on my mind for 30 years, due to seeing the good and

the bad of performing eective soἀware engineering reviews and audits.

My acknowledgments go to all the second-level soἀware managers I’ve

worked with for allowing me to excel in the commercial soἀware world

and military and aerospace programs. In my early years, and with the

support of my wife and family, I received the Outstanding Young Man of

America Award and achieved a Bachelor of Science (BS) in business man-

agement with an emphasis on computer science while attending Weber

State University. ank you to my lovely wife, for her support and patience

with me throughout these past 34 years.

Aἀer college the Hercules Aerospace Division employed me as a senior

soἀware designer. e soἀware team I worked with gave me insight to

the soἀware development environment. I will never forget when my rst

soἀware manager told me to go work for Boeing and sharpen my soἀ-

ware skills. I was soon employed by the Boeing Company in the Soἀware

Conguration Management (SCM) organization supporting the B2 and

F-22 Raptor programs. e soἀware manager and leads were instrumental

in my areas of expertise for advancement in the Boeing Company. Special

recognition goes to the Boeing soἀware managers in Denver, Colorado,

剩余254页未读，继续阅读

by1455

粉丝: 1
资源: 16

软件工程回顾与关键实践：从安全到云计算

XXX系统源代码安全审计报告(模板).doc

XX公司审计报告披露核对表

2007年下半年数据库系统工程师下午试卷及答案

海洋股份2021年上半年业绩回顾与分析

软件工程课程设计报告：版本控制系统的有效管理

软件工程实践宝典：敏捷开发与DevOps的文化精髓

版本控制在软件工程中的应用：理论与实践的完美融合

软件工程项目管理精要：时间、成本与质量控制的黄金法则

Linux防火墙规则的版本控制和审计：确保安全策略一致性的关键流程

工程方法概览：使用MICROSAR进行E2E集成的详细流程

最新资源