New paradigms for high assurance software
John McLean · 1993
We present a new para.digmfor the development of trustworthy systems.It differs from our current paradigm by separating distinct desiderata.that, are bundled in the Trusted Comp&er System Evaluation Criteria, requiring tha.t our formalisms be t.ied t.o real world concerns, requiring a uniform method for a.ssuring that formalisms a.re met, replacing a. code-t,henvalidate methodology by a. refiilement-l,a.sedmet.llodology, and using con~posa1~ilit.ylogic to develop systems from COTS software.