High-confidence design for security
Shiu‐Kai Chin · Communications of the ACM · 1999
This article describes methods that establish confidence that implementations meet their specifications and security requirements. These methods are rigorous in nature. They rely on mathematical logic and are accessible to engineering students at the masters level. As is typical in systems engineering, a variety of methods are used depending on what level of design is being addressed.