[BLACKBOX] Secure Software

From: [at]} <Maksimiuk>
Date: Thu, 17 Jan 2008 19:42:40 +0100

----boundary-LibPST-iamunique-448858295_-_-
Content-type: text/plain

Dear All,
the article was indeed interesting. However, I am surprised that Ada programming language was not present on the list.
There is an excellent set of tools for from Praxis High Integrity Systems for writing and validating SPARK (subset of Ada) programs
using Z-notation. Yo can find some more interesting papers at http://www.praxis-his.com/publications/.

For multitasking programs, there is so-called Ravenscar profile that describes all nuts and bolts of safety-critical hard real-time
systems (http://en.wikipedia.org/wiki/Ravenscar_profile).


You can also look at: http://www.applicationsoftwaredeveloper.com/features/june07/article2.html pp. 37 (Need Secure Software ?)
and here http://www.mil-embedded.com/dl.php?pdf=/pdfs/AdaCore.Win06.pdf

Languages like C++, Ada, and Java are huge. The main advantage of the CP language is its size. When somebody wants to deliver a system that needs to be accredited, almost all components of the system must be validated or certified (also compiler).

IMHO, combination of Maude (or CofeOBJ) as an algebraic specification tool that generates CP code is the right way to go ....

BTW, in safety-critical or secure systems, there is no place for unsafe code :):).

Regards,
Darek

----
To unsubscribe, send a message with body "SIGNOFF BLACKBOX" to LISTSERV{([at]})nowhere.xy----boundary-LibPST-iamunique-448858295_-_-
Content-type: application/rtf
Content-transfer-encoding: base64
Content-Disposition: attachment; filename="rtf-body.rtf"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==
----boundary-LibPST-iamunique-448858295_-_---

Received on Thu Jan 17 2008 - 19:42:40 UTC