Rapid Development of Secure Software
MondayPresentation
First, careful allocation of security obligations between a high assurance kernel and a target application reduces the scope of security implementation required of the application. The application is ‘plugged into’ the security foundation of the kernel to provide significant assurance.
Second, the Multiple Independent Levels of Security (MILS) architecture approach cleanly identifies the critical cross-domain security components minimizing the scope and depth of security review. Expensive security efforts can be targeted accurately.
And finally, each stage of refinement from specification through implementation introduces security obligations in translation. Each necessitates a costly specific demonstration of the correspondence between the artifact of the previous stage and its derivative.
Strongly-typed functional languages can provide a rapid specification prototype that can be expanded ‘in-place’ into the eventual implementation. Security guarantees of the prototype will exist in the implementation.
4:30 - 5:15
Salon G
Not Available