Trustworthy software OW2 Conference Nov10

24
可信 共享 协同 Design of Internet Design of Internet - - based Trustworthy Software based Trustworthy Software Production Service System Production Service System National 863 Grand Project National 863 Grand Project Highly Trustworthy Software Production Highly Trustworthy Software Production Tools and Integration Environments Tools and Integration Environments The 2010 OW2 The 2010 OW2 Annual Conference Annual Conference http://www.trustie.net Yin Gang, NUDT Yin Gang, NUDT 2010.11.25 2010.11.25 OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Transcript of Trustworthy software OW2 Conference Nov10

Page 1: Trustworthy software OW2 Conference Nov10

可信 共享 协同

Design of InternetDesign of Internet--based Trustworthy Software based Trustworthy Software Production Service SystemProduction Service System

National 863 Grand ProjectNational 863 Grand ProjectHighly Trustworthy Software Production Highly Trustworthy Software Production Tools and Integration EnvironmentsTools and Integration Environments

The 2010 OW2The 2010 OW2 Annual ConferenceAnnual Conference

http://www.trustie.net

Yin Gang, NUDTYin Gang, NUDT2010.11.252010.11.25

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Page 2: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Content

Trustie Service Model of InternetTrustie Service Model of Internet--based based Trustworthy Software Production SystemTrustworthy Software Production System

Design of InternetDesign of Internet--based Production based Production Service System for Trustworthy SoftwareService System for Trustworthy Software

Page 3: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Software Production

Software production is efficient and trustworthy Software production is efficient and trustworthy development of software.development of software.

Page 4: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Status of Internet-based Software Production Services

OW2Forge

SonarQuality

OhlohDirectory

ODPDirectory

CSDNCommunity

OSSCommunity

LinuxCommunity

Forge Forge

OSPDirectory

Forge

SourceForge

EclipseForgeLinux

ForgeGnorm

Forge

ForgeForge

Googlecode

Community

Directory

DirectoryCommunity

Forge

Community

Community

My Open Source

OSSD

OhlohQuality

Forge

Forge

Directory

Community

Directory

TrustieForge Trustie

Directory

TrustieQuality

Community

Community

Forge Forge

These services are relatively independent or even isolated ,lack of clear global software

production service model

These services are relatively independent or even isolated ,lack of clear global software

production service model

OW2Community

Page 5: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Project of China 863 Program

Part of Technical TargetsPart of Technical Targets

Key technologies of trustworthy Key technologies of trustworthy

software production, related tools and software production, related tools and

resourcesresources

Trustie environments and trust worthy Trustie environments and trust worthy

software production specificationssoftware production specifications

Part of Application TargetsPart of Application Targets

Improving the large scale production of Improving the large scale production of

trustworthy software productiontrustworthy software production

Providing supports for Providing supports for informatizationinformatization

national of economy, society, culture national of economy, society, culture

and defenseand defense

Page 6: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Project of China 863 Program

Part of Technical TargetsPart of Technical Targets

Key technologies of trustworthy Key technologies of trustworthy

software production, related tools and software production, related tools and

resourcesresources

Trustie environments and trust worthy Trustie environments and trust worthy

software production specificationssoftware production specifications

Part of Application TargetsPart of Application Targets

Improving the large scale production of Improving the large scale production of

trustworthy software productiontrustworthy software production

Providing supports for Providing supports for informatizationinformatization

national of economy, society, culture national of economy, society, culture

and defenseand defense

National Trustworthy Software Resource Sharing and Collaborative Production Environment

(Trustie)

National Trustworthy Software Resource Sharing and Collaborative Production Environment

(Trustie)

Trustie is finding a way to provide software production services with a global

and unified perspective

Trustie is finding a way to provide software production services with a global

and unified perspective

Page 7: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

What are Software Production Factors ?

Software Producers

developers:programmers, managers, testers…consumers:users, service providers…prosumers:users that can help developing software…

Means of software production

Software tools:developing tools, ID-Environments

Software resources:components, repositories, directories

Software knowledges:forums, social networks

Various types of software production factors are massively distributed over Internet

Various types of software production factors are massively distributed over Internet

Page 8: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Trustie Service Model for Internet-based Software Production System

InternetInternetSP FactorsSP FactorsSelectionSelection

SP Factors SP Factors CollaborationCollaboration

SP Factors SP Factors SharingSharing

SP Factors SharingSP Factors Sharing

collection

processing

publication

SP Factors SelectionSP Factors Selection

description

searching

evaluation

SP Factors CollaborationSP Factors Collaboration

selection

composition

developing

Page 9: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Challenges of Implementing Trustie Service Model

Large scale SP-Factors sharing

Trustworthy SP-Factors Selection

Efficient SP-Factors Collaboration

Page 10: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Content

Trustie Service Model of InternetTrustie Service Model of Internet--based based Trustworthy Software Production SystemTrustworthy Software Production System

Design of InternetDesign of Internet--based Production based Production Service System for Trustworthy SoftwareService System for Trustworthy Software

Page 11: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Trustie Approach for Construction of a Software Production Service System

SVN, CVS

Mailing list

Wiki, Forum

RelatedOW2 projects

Tools Searching

ToolsIntegration

RelatedOW2 projects

Evidence Collection

EvidencePackage, RAS

EvidenceProducing

RelatedOW2 projects

RelatedOW2 projects

ResourceCollection

ResourceRanking

ResourceSearching

CommunityNetworkingEnvironment

ProductionLine Systems

CollaborativeDeveloping

Environment

ToolsCompositionEnvironment

ResourceSharing

Environment

EvidencemeasurementEnvironment

Production Production Factors Factors CollaborationCollaboration

Production Production Factors Factors CollaborationCollaboration

Production Production FactorsFactors

SelectionSelection

Production Production Factors Factors SharingSharing

Page 12: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Trustie Approach for Construction of a Software Production Environment

Meta Software Production Environments (SPEs)Software Resource Sharing Environment

Software Tools Composition Environment

Other or new SPEs can be generated by Tools composition – Production Line System

Five common SPEs in Trustie Architecture

Technology-oriented SPEs

Domain-oriented SPEs

Page 13: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

A Trustie-based Trustworthy Software Production Service System

DevelopingCommunities

OW2Forge

DevelopingForge

DevelopingForge

TrustieForge

DevelopingForge

DevelopingForge

DevelopingForge

DevelopingForge

DevelopingForge

DevelopingForge

DevelopingForge

DevelopingForge

DevelopingEnvironment

DevelopingEnvironment

DevelopingEnvironment

ProductionLine SystemDeveloping

Environment

DevelopingEnvironment

ProductionLine System

ProductionLine System

SoftwareDirectory

ServiceSoftwareDirectory

ServiceSoftwareDirectory

Service

SoftwareEvidenceService

SoftwareEvidenceService

SoftwareEvidenceService

X1 Services

X2 Services

X3 Services

X4 Services

Page 14: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Current Trustie Technology System

Technology system of large scale collaborative

trustworthy software

production

Technology system of Technology system of large scale collaborative large scale collaborative

trustworthy software trustworthy software

productionproduction

Service system of large scale collaborative

trustworthy software production

Service system of Service system of large scale collaborative large scale collaborative

trustworthy software trustworthy software production production

Page 15: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Current Trustie Technology System

Spec1Spec1::Trustworthy software productionTrustworthy software production

Spec2Spec2::Collaborative developmentCollaborative development

Spec3Spec3::Production line frameworkProduction line framework

Spec4Spec4::Resource managementResource management

Spec5Spec5::Trustworthiness classificationTrustworthiness classification

Spec6Spec6::LifecycleLifecycle evidence frameworkevidence framework

Technology system of large scale collaborative

trustworthy software production

Technology system of Technology system of large scale collaborative large scale collaborative

trustworthy software trustworthy software productionproduction

Service system of large scale collaborative

trustworthy software production

Service system of large Service system of large scale collaborative scale collaborative

trustworthy software trustworthy software productionproduction

Page 16: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

○级未知级

○级未知级

一级可用级

一级可用级

二级证实级

二级证实级

三级实用级

三级实用级

四级评估级

四级评估级

五级证明级

五级证明级

可信级别 内涵

实体可用自主声明可信属性可证实

可证实的成功应用案例

实体可用自主声明可信属性可证实

实体可用

实体可用自主声明可信属性可证实

可证实的成功应用案例

通过了独立权威机构的可信评估

实体可用自主声明可信属性可证实

可证实的成功应用案例

通过了独立权威机构的可信评估

可信属性可证明

SoftwareSoftwareProduction LinesProduction Lines软件生产线是按照一定的软件生产方法,将若干软件生产工具和制品有序组织起来的软件开发环境。生产线集成框架是支撑生产线构造,工具集成,协同开发的基础设施。

▬生产线集成框架

-分布式工序制导的生产线集成框架

▬面向软件技术特征的生产线

-基于构件的生产线

-面向服务的生产线

-支持异构集成的生产线

-支持运行监控的生产线

Current Trustie Technology System

Collaborative Developing Collaborative Developing EnvironmentEnvironment

支持软件项目的全生命期管理,包括项目

信息发布、项目计划、版本管理、缺陷管

理、实时通讯、邮件列表。

-creation, management, collaboration of software

projects

-construction of production lines

Software ResourceSoftware ResourceRepositoryRepository软件资源共享、组织、管理。

▬基本功能

-软件资源及其可信证据的发布与检索

-软件资源可信证据存储与评估

▬主要用途

-企业软件资源管理

-开源软件资源管理

-Internet软件资源获取与组织

http://http://www.trustie.netwww.trustie.net

Page 17: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

软件制品

○级未知级

○级未知级

一级可用级

一级可用级

二级证实级

二级证实级

三级实用级

三级实用级

四级评估级

四级评估级

五级证明级

五级证明级

可信级别 内涵

实体可用自主声明可信属性可证实

可证实的成功应用案例

实体可用自主声明可信属性可证实

实体可用

实体可用自主声明可信属性可证实

可证实的成功应用案例

通过了独立权威机构的可信评估

实体可用自主声明可信属性可证实

可证实的成功应用案例

通过了独立权威机构的可信评估

可信属性可证明

SoftwareSoftwareProduction LinesProduction Lines软件生产线是按照一定的软件生产方法,将若干软件生产工具和制品有序组织起来的软件开发环境。生产线集成框架是支撑生产线构造,工具集成,协同开发的基础设施。

▬生产线集成框架

-分布式工序制导的生产线集成框架

▬面向软件技术特征的生产线

-基于构件的生产线

-面向服务的生产线

-支持异构集成的生产线

-支持运行监控的生产线

Current Trustie Technology System

Collaborative Developing Collaborative Developing EnvironmentEnvironment

支持软件项目的全生命期管理,包括项目

信息发布、项目计划、版本管理、缺陷管

理、实时通讯、邮件列表。

-creation, management, collaboration of software

projects

-construction of production lines

Software ResourceSoftware ResourceRepositoryRepository软件资源共享、组织、管理。

▬基本功能

-软件资源及其可信证据的发布与检索

-软件资源可信证据存储与评估

▬主要用途

-企业软件资源管理

-开源软件资源管理

-Internet软件资源获取与组织

http://http://www.trustie.netwww.trustie.net

Trustie Software Production Lines

Distributed Task-directed Production

Line Architecture

Component-based SPL

Service-oriented SPL

Heterogeneous Integration-oriented SPL

Monitor-oriented SPL

Trustworthiness evaluation SPL

Process Management SPL

Embedded System Design SPL

Flow Management SPL

Data Processing SPL

SPLs for specific application domains

Trustie Software Production LinesTrustie Software Production Lines

Distributed Task-directed Production

Line Architecture

Component-based SPL

Service-oriented SPL

Heterogeneous Integration-oriented SPL

Monitor-oriented SPL

Trustworthiness evaluation SPL

Process Management SPL

Embedded System Design SPL

Flow Management SPL

Data Processing SPL

SPLs for specific application domains

Multiple-spectrum of Trustie

software tools

more 100 tools covering

requirement analysis, design,

integration, maintenance, etc

Multiple-spectrum of Trustie

software components

1534 new-designed components

covering main production

processes and business domains

more than 16000 evaluated

software resources

Trustie collaborative developing

software projects

more than 500 software projects

are developed across different

districts

Multiple-spectrum of Trustie

software tools

more 100 tools covering

requirement analysis, design,

integration, maintenance, etc

Multiple-spectrum of Trustie

software components

1534 new-designed components

covering main production

processes and business domains

more than 16000 evaluated

software resources

Trustie collaborative developing

software projects

more than 500 software projects

are developed across different

districts

Page 18: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Current Trustie Service System

软件开发协同平台

软件生产线集成框架

重用软件资源

可信保障机制

工具

工具

重用软件资源

可信保障机制

工具

工具

重用软件资源

可信保障机制

工具

工具工具工具工具工具工具工具工具工具工具工具工具软件资源库

重用软件资源

可信保障机制

工具重用软件资源

可信保障机制

工具重用软件资源

可信保障机制

工具

一组生产线一组生产线一组生产线一组生产线

TrustieTrustie平台体系结构平台体系结构

Trustie公共

社区服务

TrustieTrustie公共公共

社区服务社区服务

技术特征生产线

技术特征生产线

服务资源

服务资源

构件资源

构件资源

Trustie资源库Trustie资源库

构件库 服务库 工具库

资源管理 证据管理

Trustie协同开发平台Trustie协同开发平台

软件版本库 缺陷库

项目管理 缺陷管理

Trustie生产线集成

框架

Trustie生产线集成

框架

工具仓库

任务管理 生产线管理

生产线配置

可信评估工具集

可信评估工具集

服务组合工具集

服务组合工具集

协同开发工具集

协同开发工具集

应用领域生产线

应用领域生产线

Internet / Intranet

软件企业

航天领域

金融领域

飞控领域

大型企业

交通领域

电信领域

大学、研究所

开源组织

Software ToolsSoftware ToolsSoftware Tools

Software ComponentsSoftware ComponentsSoftware Components

Software production lineSoftware production lineSoftware production line

Technology system of large scale collaborative

trustworthy software production

Technology system of Technology system of large scale collaborative large scale collaborative

trustworthy software trustworthy software productionproduction

Service system of large scale collaborative

trustworthy software production

Service system of large Service system of large scale collaborative scale collaborative

trustworthy software trustworthy software productionproduction

Key Service1: Trustie collaborative Key Service1: Trustie collaborative developing servicedeveloping service

creation, management, collaboration of creation, management, collaboration of software projectssoftware projectsconstruction of production linesconstruction of production lines

KeyKey Service2 :Service2 : Trustie software resource Trustie software resource

sharing servicesharing servicesharing of software tools, components sharing of software tools, components and production linesand production linessharing of trustworthiness evidencessharing of trustworthiness evidences

Page 19: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Current Trustie Service System

软件开发协同平台

软件生产线集成框架

重用软件资源

可信保障机制

工具

工具

重用软件资源

可信保障机制

工具

工具

重用软件资源

可信保障机制

工具

工具工具工具工具工具工具工具工具工具工具工具工具软件资源库

重用软件资源

可信保障机制

工具重用软件资源

可信保障机制

工具重用软件资源

可信保障机制

工具

一组生产线一组生产线一组生产线一组生产线

TrustieTrustie平台体系结构平台体系结构

Trustie公共

社区服务

TrustieTrustie公共公共

社区服务社区服务

技术特征生产线

技术特征生产线

服务资源

服务资源

构件资源

构件资源

Trustie资源库Trustie资源库

构件库 服务库 工具库

资源管理 证据管理

Trustie协同开发平台Trustie协同开发平台

软件版本库 缺陷库

项目管理 缺陷管理

Trustie生产线集成

框架

Trustie生产线集成

框架

工具仓库

任务管理 生产线管理

生产线配置

可信评估工具集

可信评估工具集

服务组合工具集

服务组合工具集

协同开发工具集

协同开发工具集

应用领域生产线

应用领域生产线

Internet / Intranet

软件企业

航天领域

金融领域

飞控领域

大型企业

交通领域

电信领域

大学、研究所

开源组织

Software ToolsSoftware ToolsSoftware Tools

Software ComponentsSoftware ComponentsSoftware Components

Software production lineSoftware production lineSoftware production line

Technology system of large scale collaborative

trustworthy software production

Technology system of Technology system of large scale collaborative large scale collaborative

trustworthy software trustworthy software productionproduction

Service system of large scale collaborative

trustworthy software production

Service system of large Service system of large scale collaborative scale collaborative

trustworthy software trustworthy software productionproduction

Key Service1: Trustie collaborative Key Service1: Trustie collaborative developing servicedeveloping service

creation, management, collaboration of creation, management, collaboration of software projectssoftware projectsconstruction of production linesconstruction of production lines

KeyKey Service2 :Service2 : Trustie software resource Trustie software resource

sharing servicesharing servicesharing of software tools, components sharing of software tools, components and production linesand production linessharing of trustworthiness evidencessharing of trustworthiness evidences

Trustie Service SystemCurrently contains a spectrum of software components, tools and environments

16824 components, 510 developing projects

1634 new-designed software tools and components

20052 registered users

more than 20 software production environments (lines)

Trustie Service SystemTrustie Service SystemCurrently contains a spectrum of software components, tools and environments

16824 components, 510 developing projects

1634 new-designed software tools and components

20052 registered users

more than 20 software production environments (lines)

Page 20: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Application in Software Companies and NCSs

Largest software companies in China has successfully launched thLargest software companies in China has successfully launched the practices of e practices of

Industrial production of trustworthy softwareIndustrial production of trustworthy software

rebuilt enterprise drebuilt enterprise development evelopment sstrategytrategy based on Trustie technology systembased on Trustie technology system

created Trustiecreated Trustie--based, largebased, large--scale industrial software production platformscale industrial software production platform

retrieved the application data that can retrieved the application data that can quantitivequantitively prove the effects of Trustiely prove the effects of Trustie

created more than 1 billion direct economic benefits, and nearlycreated more than 1 billion direct economic benefits, and nearly 10 billon potentially10 billon potentially

National cNational critical ritical ssystemsystems (NCS) (NCS) in in aaviation, viation, sspaceflight, paceflight, eelectricitylectricityandand ddefenseefense ddomainsomains has has successfully upgraded theirsuccessfully upgraded theirtrustworthiness based on Trustietrustworthiness based on Trustie

The Largest Two The Largest Two Software Companies in ChinaSoftware Companies in China

The Largest NavigationThe Largest NavigationSoftware Companies in ChinaSoftware Companies in China

Page 21: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

International Collaboration and Future Application

International CollaborationsOW2 uses Trustie for evaluating and many Trustie tools are OW2 projects. OW2 is an open source organization that is one of the four largest OSS Consortiums together with other organizations such as Linux Foundation, Apache and Eclipse

Thales and Avaya lab use Trustie for collaborative innovation

Future Applications of Trustie PlatformPublic science and technology platform for software innovations

Public education platform for cultivating talents of software technologies

Public industry platform for the development of new-style industries of collaborative software production

Page 22: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Related Systems

Current Software Production Services in Internet

Forges: SourceForge, OW2, Trustie

Repositories: Tool Repositories (Maven), Component Repositories (JIDE)

Directories: OSS Directories (ODP, Ohloh, Sonar), Service Directories

(WebAPI, Programmable Web)

SourceForge is the largest Open Source forge

24 0,000 registered projects, 2,600,000 registered users

Ohloh is a directory system for OSS projects and developers

430,000 registered projects, 720,000 registered users

Sonar is an open platform to manage code quality.

130 projects

CollabNet platform is the most widely used platform for distributed software

development

2 million users 、500 companies and 20,000 software projects

Page 23: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Discussion

19K, 0.5K+++++++Trustie

-, -++Eclipse

+…, +…++++++++++++Trustie & OW2

720K, 430K+++++++Ohloh

-, 0.13K++Sonar

2600K, 240K++SourceForge

1500K, 20K+++++Collabnet

System

Scale

Production

Factors

Selection

Production

Factors

Sharing

Production

Factors

Collaboration

Mechanisms

ServiceSystems

Page 24: Trustworthy software OW2 Conference Nov10

可信 共享 协同

OW2 Annual Conference 2010, November 24-25, La Cantine, Paris

Thank You!Thank You!

http://http://www.trustie.netwww.trustie.net

The 2010 OW2 Annual ConferenceThe 2010 OW2 Annual Conference