关键词: 风险管理, 风险评估, 贝叶斯网络, 可信软件, 模糊综合评价法

Abstract: Risk management has been becoming an important component of the high-quality software development process. As a powerful tool of risk management, Bayesian networks are the effective method for handling the uncertainties. As one of the important activities of risk management, risk assessment is the prerequisite of risk control. Combined with the Bayesian networks and fuzzy theory, this paper proposes a method for risk assessment. First of all, it uses Bayesian networks to assess the risk probability of the risk factors which are affecting trustworthy software, then uses fuzzy comprehensive evaluation method to evaluate the comprehensive effects of risks. This method is used to assess risks in the software project which can provide new strategies for developing high-quality trustworthy software.

Key words: risk management, risk assessment, Bayesian networks, trustworthy software, fuzzy comprehensive evaluation method