Proposta de protocolo de avaliação de softwares empregados em um meio naval com propulsão nuclear

Abstract

The Brazilian Navy, as a strong military expression on the world stage, seeks to remain equipped with the most modern maritime, land and air means, which entails constant modernization with the increasing implementation of electronic, digital and computerized equipment. Among its expansion and modernization projects, the most innovative and modern in progress is the development of a submarine, conventionally armed, powered by nuclear energy, a unique technology, developed and prototyped entirely by Brazilians. That makes great use of digital systems in its instrumentation and control, which need to function correctly and safely, which is proven by demonstrating compliance with a series of requirements and conditions previously specified in a conformity assessment process. Aiming to meet this need, this work proposes a protocol for evaluation of software used in digital systems of naval nuclear means. Named ProAS-NN, an acronym for Software Assessment Protocol in the Nuclear Naval scope, it uses the Validation and Verification technique, which follows the thinking of several authors, and follows what is practiced by the nuclear sector in several countries and recommended by bodies regulators around the world, including in fixed installations in Brazil, and follows norms for the evaluation of software applied in nuclear activity issued by the IEEE and NRC, prepared in the form of a guide, observes recommendations for the composition of evaluation systems of software issued by ISO/IEC. After its development, it underwent a validation process, with submission to a panel of specialists in software evaluation in the general and nuclear scope, who expressed their opinions, pointed out weaknesses and needs for improvement. It also underwent a proof of concept, when evaluating a Brazilian Navy software, used to aid navigation, where it was possible to evaluate that the evaluation protocol proposal can be used to characterize a software in a reliable way, identifying possible threats security, control measures and protections to mitigate them, and suggest opportunities for improvement.