QUALITY ANALYSIS AND QUANTITATIVE ASSESSMENT OF RISKS METHODS OF SOFTWARE DEVELOPMENT

Abstract

In the article, one of the contradictions arising in the development of software is defined and solved, which consists in neglecting software developers of software vulnerability vulnerabilities. All risks in the development of software, with more or less admission, can be considered a subjective result of the process, which is associated with a lack of quantitative or qualitative information about the process, as well as its uncertainty. These factors can be considered the main reason, generates and accompanies risks throughout their life cycle. As a solution to this problem, the use of developed methods of analysis and quantitative assessment of the risks of software development is suggested. Its distinctive feature is the consideration of operational risk factors, especially the risk of identifying software vulnerabilities and evaluating an arbitrary, consistent, finite set of "information quanta". It is proved that the method of qualitative risk assessment of the project is descriptive and represents a process aimed at identifying specific project risks, as well as the causes that generate them, with subsequent assessment of possible consequences and development of measures to deal with risks. In the process of risk analysis, the development of metrics that are responsible for determining the limiting indicators of factors that signal the manifestation of risks. A method for quantifying software development risks has been developed. Its distinctive feature is the integrated use of the "Failure Tree Analysis" methodology and a method for estimating the net present value of a software development project taking into account the negative factors of possible detection of software security vulnerabilities. At the same time, the use of the method of estimating the net present value of the software development project allows the project to be considered in a comprehensive manner, taking into account the need to take into account security and vulnerability testing of the software with the use of tools that overcome the complexity, uncertainty and long-term nature of projects.