A Few Remarks About Formal Development of Secure Systems
Formal methods provide remarkable tools allowing for high levels of confidence in the correctness of developments. Their use is therefore encouraged, when not required, for the development of systems in which safety or security is mandatory.But effectively specifying a secure system or deriving a secure implementation can be tricky. We propose a review of some classical gotchas and other possible sources of concerns with the objective to improve the confidence in formal developments,or at least to better assess the actual confidence level.
Eric Jaeger Therese Hardin
Direction centrale de la securite des systemes dinformation 51 boulevard de la Tour-Maubourg 75700 LIP6, Universite Pierre et Marie Curie (Paris 6) 4 place Jussieu 75252 Paris Cedex 05, France
国际会议
11th IEEE High Assurance Systems Engineering Symposium(HASE 2008)(第十一届IEEE高可信系统工程国际研讨会)
南京
英文
165-174
2008-12-03（万方平台首次上网日期，不代表论文的发表时间）