High assurance computing software technology requirements

An overview of the technology needed to support the development of high-assurance software is given. The discussion is based on extending methods and tools that have been used successfully to construct systems which enforce a confidentiality property. Experience has shown that the use of formal methods, highly structured designs and rigorous testing in combination can result in systems that can enforce confidentiality with a high degree of assurance. This technology aids in the correct implementation of the desired property and provides a means of transferring assurance of its correct operation to parties not directly associated with its development by providing a clear understanding of the requirements and the design of the system.<
>