Applying Practical Formal Methods to the Specification and Analysis of Security Properties

Authors:
Constance L. Heitmeyer
Affiliations:
-
Venue:
MMM-ACNS '01 Proceedings of the International Workshop on Information Assurance in Computer Networks: Methods, Models, and Architectures for Network Security
Year:
2001

Citing 13
Cited 2

Automated consistency checking of requirements specifications

ACM Transactions on Software Engineering and Methodology (TOSEM)
The Model Checker SPIN

IEEE Transactions on Software Engineering - Special issue on formal methods in software practice
Automatic generation of state invariants from requirements specifications

SIGSOFT '98/FSE-6 Proceedings of the 6th ACM SIGSOFT international symposium on Foundations of software engineering
Using Abstraction and Model Checking to Detect Safety Violations in Requirements Specifications

IEEE Transactions on Software Engineering
Formal methods for verification and validation of partial specifications: a case study

Journal of Systems and Software - Special issue on formal methods technology transfer
Specifying the mode logic of a flight guidance system in CoRE and SCR

FMSP '98 Proceedings of the second workshop on Formal methods in software practice
Using model checking to generate tests from requirements specifications

ESEC/FSE-7 Proceedings of the 7th European software engineering conference held jointly with the 7th ACM SIGSOFT international symposium on Foundations of software engineering
Using TAME to prove invariants of automata models: Two case studies

FMSP '00 Proceedings of the third workshop on Formal methods in software practice
Salsa: Combining Constraint Solvers with BDDs for Automatic Invariant Checking

TACAS '00 Proceedings of the 6th International Conference on Tools and Algorithms for Construction and Analysis of Systems: Held as Part of the European Joint Conferences on the Theory and Practice of Software, ETAPS 2000
SCR*: A Toolset for Specifying and Analyzing Software Requirements

CAV '98 Proceedings of the 10th International Conference on Computer Aided Verification
SCR: A Practical Approach to Building a High Assurance COMSEC Syste

ACSAC '99 Proceedings of the 15th Annual Computer Security Applications Conference
Specifying Software Requirements for Complex Systems: New Techniques and Their Application

IEEE Transactions on Software Engineering
Abstract Requirements Specification: A New Approach and Its Application

IEEE Transactions on Software Engineering

Event-Driven FRP

PADL '02 Proceedings of the 4th International Symposium on Practical Aspects of Declarative Languages
Specification Modeling and Validation Applied to a Family of Network Security Products

Proceedings of the 16th IEEE international conference on Automated software engineering

Quantified Score

Hi-index	0.00

Visualization

Abstract

The SCR (Software Cost Reduction) toolset contains tools for specifying, debugging, and verifying system and software requirements. The utility of the SCR tools in detecting specification errors, many involving safety properties, has been demonstrated recently in projects involving practical systems, such as the International Space Station, a flight guidance system, and a U.S. weapons system. This paper briefly describes our experience in applying the tools in the development of two secure systems: a communications device and a biometrics standard for user authentication.