GB/T 18492-2001 in English

《GB/T 18492-2001信息技术 系统及软件完整性级别》由TC28（全国信息技术标准化技术委员会）归口，TC28SC7（全国信息技术标准化技术委员会软件与系统工程分会）执行，主管部门为国家标准化管理委员会。
本标准介绍了软件完整性级别的概念和软件完整性需求，定义了与完整性级别相关的概念，定义了确定完整性级别和软件完整性需求的过程，并提出对每个过程的需求。本标准不规定专门的一组完整性级别或软件完整性需求。它们必须依据某一项目的基础在该项目中加以确定。本标准仅适用于软件。系统完整性级别和非软件部件的完整性级别仅在本标准中被用来确定软件部件的完整性级别。本标准可供软件产品或包含软件产品的系统的开发者、使用者、采购者和评估人员使用，向他们提供关于这些产品和系统和管理上和技术上的支持。软件完整件级别表示软件特性的取值范围，该范围对将系统风险保持在可容忍的限度内是必需的。对于执行缓减功能的软件而言，此特性是指软件必须执行缓减功能的可靠性。对于因其失效而导致一个系统威胁的软件而言，此特性是指对该失效的频率或概率的限制。软件完整性需求是软件开发中软件工程过程所必需满足的需求。足软件工程产品所必需满足的需求;或是为提供与软件完整性级别相适应的软件置信度而对软件在某一时段的性能的需求。本标准未规定将确定软件完整性级别(的工作)同整个系统工程生存期过程结合在一起的方法。

Scope

This standard introduces the concept of software integrity levels and software integrity requirements, defines concepts related to integrity levels, defines the process of determining integrity levels and software integrity requirements, and proposes the requirements for each process. This International Standard does not specify a specific set of integrity levels or software integrity requirements. They must be determined within a project on a project basis. This standard applies to software only. The system integrity level and the integrity level of non-software components are only used in this standard to determine the integrity level of software components. This International Standard can be used by developers, users, purchasers and evaluators of software products or systems containing software products to provide them with management and technical support for these products and systems. A software integrity level represents the range of values of a software characteristic that is necessary to keep system risk within tolerable limits. For software that performs a mitigation function, this characteristic refers to the reliability with which the software must perform the mitigation function. For software whose failure poses a threat to a system, this property refers to a limit on the frequency or probability of that failure. Software integrity requirements are the requirements that must be met by the software engineering process in software development, and are the requirements that must be met by software engineering products; performance requirements. This International Standard does not specify a method for integrating (the work of) determining the software integrity level with the overall systems engineering lifecycle process.