An advanced process model's application to trusted X Window system development

Presents an overview of the initial application of a risk-driven reasoning-based development paradigm to a trusted X Window system prototype on Trusted Mach. The goal of the prototype is to evolve to a system that, after refinements, will be certifiable at a B3 level of trust. The paper provides a snapshot of research work. It focuses on tailoring of the development paradigm based on the risk identification and mitigation performed early in the project. Actual project results in terms of the major risk mitigation activities of the first two spirals are presented. The difficult issues involved in stretching trusted system technology on several fronts (complex system application, new development approach, and lack of TCSEC interpretation for windowing systems) are stressed. The paper concludes with some general observations and initial lessons learned about the application of the development paradigm.<
>