Design and Assurance Strategy for the NRL Pump

Developing a trustworthy system is difficult because the developer must construct a persuasive argument that the system conforms to its critical requirements. This assurance argument, as well as the software and hardware, must be evaluated by an independent certification team. In this paper, we pres...

Full description

Saved in:
Bibliographic Details
Main Authors: Kang, Myong H, Moore, Andrew P, Moskowitz, Ira S
Format: Report
Language:English
Subjects:
COMPUTER PROGRAMS
NAVAL RESEARCH LABORATORIES
PE61153N
PUMPS
Pumps, Filters, Pipes, Tubing, Fittings & Vlvs
QUALITY ASSURANCE
STRATEGY
Online Access:Request full text
Tags: Add Tag
No Tags, Be the first to tag this record!
Description
Summary:Developing a trustworthy system is difficult because the developer must construct a persuasive argument that the system conforms to its critical requirements. This assurance argument, as well as the software and hardware, must be evaluated by an independent certification team. In this paper, we present the external requirements and logical design of a specific trusted device, the NRL Pump, and describe our plan, called the assurance strategy, to create the eventual assurance argument. Our assurance strategy exploits currently available graphical specification, simulation, formal proof, and testing coverage analysis tools. Portions of the design are represented by figures generated by the Statement tool set, and we discuss how those tools, and covert channel analysis, will be used to show that the logical design conforms to its external requirements. We conclude with some remarks on a possible physical architecture.