A Few Remarks About Formal Development of Secure Systems

Eric Jaeger (1, 2) , Thérèse Hardin (2)

1 DCSSI/SDS/LTI - Laboratoire des Technologies de l'Information
2 SPI - Sémantiques, preuves et implantation

Formal methods provide remarkable tools allowing for high levels of confidence in the correctness of developments. Their use is therefore encouraged, when not required, for the development of systems in which safety or security is mandatory. But effectively specifying a secure system or deriving a secure implementation can be tricky. We propose a review of some classical `gotchas' and other possible sources of concerns with the objective to improve the confidence in formal developments, or at least to better assess the actual confidence level.

Mots clés: Formal Methods; Security; Confidence

Domaines: Logique en informatique [cs.LO]

Eric Jaeger, Thérèse Hardin. A Few Remarks About Formal Development of Secure Systems. High Assurance Systems Engineering Symposium, Dec 2008, Nanjing, China. pp.165-174, ⟨10.1109/HASE.2008.49⟩. ⟨hal-00363346⟩