The foundations of a provably secure operating system (PSOS)
Richard J. Feiertag, Peter G. Neumann · 1979 International Workshop on Managing Requirements Knowledge (MARK) · 1979
PSOS has been designed according to a set of formal techniques embodying the SRI Hierarchical Development Methodology (HDM). HDM has been described elsewhere, 1 - 3 and thus is only summarized here. The influence of HDM on the security of PSOS is also discussed elsewhere. 4 In addition, Linden 5 gives a general discussion of the impact of structured design techniques on the security of operating systems (including capability systems).