Development of Security Software: A High Assurance Methodology

Authors:
David Hardin;T. Douglas Hiratzka;D. Randolph Johnson;Lucas Wagner;Michael Whalen
Affiliations:
Rockwell Collins, Inc.,;Rockwell Collins, Inc.,;National Security Agency,;Rockwell Collins, Inc.,;Rockwell Collins, Inc.,
Venue:
ICFEM '09 Proceedings of the 11th International Conference on Formal Engineering Methods: Formal Methods and Software Engineering
Year:
2009

Citing 5
Cited 1

The Z notation: a reference manual

The Z notation: a reference manual
The Z/EVES System

ZUM '97 Proceedings of the 10th International Conference of Z Users on The Z Formal Specification Notation
Considerations in the design and verification of microprocessors for safety-critical and security-critical applications: invited tutorial

Proceedings of the 2008 International Conference on Formal Methods in Computer-Aided Design
Integration of formal analysis into a model-based software development process

FMICS'07 Proceedings of the 12th international conference on Formal methods for industrial critical systems
Verifying abstract information flow properties in fault tolerant security devices

ICFEM'06 Proceedings of the 8th international conference on Formal Methods and Software Engineering

Bit-precise formal verification of discrete-time MATLAB/Simulink models using SMT solving

Proceedings of the Eleventh ACM International Conference on Embedded Software

Quantified Score

Hi-index	0.00

Visualization

Abstract

This paper reports on a project to exercise, evaluate and enhance a methodology for developing high assurance software for an embedded system controller. In this approach, researchers at the National Security Agency capture system requirements precisely and unambiguously through functional specifications in Z. Rockwell Collins then implements these requirements using an integrated, model-based software development approach. The development effort is supported by a tool chain that provides automated code generation and support for formal verification. The specific system is a prototype high speed encryption system, although the controller could be adapted for use in a variety of critical systems in which very high assurance of correctness, reliability, and security or safety properties is essential.