A Software Audit Model for Safety-Critical Domains

Talita Ruiz Slavov Marques (1) , Luiz Eduardo Galvão Martins (1) , Johnny Cardoso Marques (2)

1 Unifesp - Federal University of Sao Paulo
2 Aeronautics Institute of Technology Sao Paulo

Nowadays, the use of software considered complex and critical is growing in several sectors of the industry, such as aeronautics with its various systems embedded in aircraft and the medical one with its increasingly advanced medical devices. As part of this research, the different software models were considered, and standards in the aeronautical (DO-178C) and medical (IEC 62304) were studied regarding their guidelines and requirements for safety-critical software development. A software audit model has been proposed with the activities that are necessary for conducting safety-critical software auditing, as well as a set of questions for software auditing developed using DO-178C has been proposed and evaluated by software experts to ensure its maturity and efficiency. The objective of the proposed software audit model is to ensure that the software developed complies with the applicable standard, allowing the auditor the necessary flexibility in the scope of the audit without the need to achieve specific predetermined milestones.

Mots clés: audit; safety-critical software; software audit model

Domaines: Informatique [cs]

Talita Ruiz Slavov Marques, Luiz Eduardo Galvão Martins, Johnny Cardoso Marques. A Software Audit Model for Safety-Critical Domains. 39th International Conference on Computer Safety, Reliability and Security (SAFECOMP), Position Paper, Sep 2020, Lisbon, Portugal. ⟨hal-02931732⟩