TitleApplying 'Practical' Formal Methods to the Specification and Analysis of Security Properties
Publication TypeConference Paper
Year of Publication2001
AuthorsHeitmeyer, C. L.
Conference NameInformation Assurance in Computer Networks (MMM-ACNS 2001)
Conference LocationSt. Petersburg, Russia
Abstract

The SCR (Software Cost Reduction) toolset contains tools for specifying, debugging, and verifying system and software requirements. The utility of the SCR tools in detecting specification errors, many involving safety properties, has been demonstrated recently in projects involving practical systems, such as the International Space Station, a flight guidance system, and a U.S. weapons system. This paper briefly describes our experience in applying the tools in the development of two secure systems: a communications device and a biometrics standard for user authentication.

Full Text

Heitmeyer2001.pdf

NRL Publication Release Number

01-1221.1-0471