航空机载软件适航性审定是验证软件安全性是否满足飞行要求的重要手段,审定依据的标准DO-178C是航空企业软件设计所必须遵循的规范要求,但在软件管理领域,还存在着重要的能力成熟度集成模型标准GJB5000A。比较分析了DO-178C与GJB5000A的异同,得出机载软件适航性审定在对软件开发过程的管理方面存在不足,提出需要加强企业在项目监控、过程测量与分析和风险管理方面的要求,并按照DO-178C标准的形式要求,给出了参考的改进方案。
Aviation airborne software airworthiness certification is an important means to verify that the safety of software meets flight requirements. The certification standard DO-178C is a standard requirement that aviation enterprise software design must follow. However, in the field of software management there is an important competence maturity integration model standard, called CMMI/GJB5000A. After a comparative analysis of DO-178C and GJB5000A, it is concluded that the airborne software airworthiness certification is insufficient in the sense of software development process management. To meet the gap it is proposed that enterprises need to strengthen project monitoring, process measurement, analysis and risk management requirements. In accordance with the formal requirements of DO-178C, a reference improvement plan is given.
[1] 杨芙清. 软件工程技术发展思索[J]. 软件学报, 2005, 16(1):1-7.
[2] 李迅, 杨朝旭, 付泱. 浅析DO-178C标准在航空机载软件开发商的应用及发展[C]//中国航空学会控制与应用第十二届学术年会论文集. 北京:中国航空学会, 2006:467-471.
[3] RTCA DO-178C. Software Considerations in Airborne Systems and equipment Certification[S]. 2011.
[4] 黄凌凡. 军用软件能力成熟度模型(CMM)二级评估的项目管理研究[D]. 上海:上海交通大学, 2010.
[5] CMMI. Capability maturity model integration version 1.3[S]. Pittsburgh:SEI Administrative Agent, 2010.
[6] 闫宇华, 王黎明, 宋太亮, 等. 军用软件研制能力成熟度模型:GJB 5000A-2008[S]. 北京:中国人民解放军总装备部, 2008.
[7] 刘煜, 尤海峰. GJB5000A与DO-178C的结合实施方案[J]. 计算机应用, 2013, 33(S1):255-258.
[8] 王金林, 牟明, 邢亮. GJB5000A与DO-178B/C的综合应用研究[J]. 航空计算技术, 2015, l45(1):100-107.
[9] 刘治学. GJB5000A与GJB9001B过程改进的研究[J]. 航空标准化与质量, 2013(1):46-48.
[10] 袁晓军, 王绮卉. GJB5000A与DO-254差异分析[J]. 航空计算技术, 2018, l48(4):130-134.