The SSP: an example of high-assurance systems engineering
Greg Wickstrom, J. Davis, Steven E. Morrison, S. Roach, Victor Winter · 2004
The SSP is a high assurance systems engineering effort spanning both hardware and software. Extensive design review, first principle design, n-version programming, program transformation, verification, and consistency checking are the techniques used to provide assurance in the correctness of the resulting system.