A risk driven process model for the development of trusted systems

• Published in: [1989 Proceedings] Fifth Annual Computer Security Applications Conference pp. 184 - 192
• Main Authors: Marmor-Squires, A., McHugh, J., Branstad, M., Danner, B., Nagy, L., Rougeau, P., Sterne, D.
• Format: Conference Proceeding
• Language: English
• Published: IEEE Comput. Soc. Press 1989
• Subjects: Contracts; Documentation; Information security; Information systems; Iterative methods; Logic; Programming; Reliability engineering; Software safety; Yarn
• ISBN: 0818620064; 9780818620065
• DOI: 10.1109/CSAC.1989.81050

This paper presents the initial results of a DARPA-funded research effort to define a development paradigm for high-performance trusted systems in Ada. The paradigm is aimed at improving the construction process and the future products of Ada systems that require both broad trust and high performance. The need for a process model and the notions of trust and assurance are reviewed. The foundation for the process model and its elements are presented. The process model is contrasted with traditional development approaches. The combination of a risk driven approach with the integration of trust and performance engineering into a unified whole appears to offer substantial advantages to system builders.< >