Certifying e-commerce software for security

This paper briefly describes the work in progress at Reliable Software Technologies in developing a certification process for certifying the security of software. We are not concerned with how well the resulting software meets its intended functionality, but rather to what extent the software behaves securely. We define certifying software as: analyzing software until confidence is gained in the security of the software or until it can be demonstrated that the software fails to meet the security policy.