Re: secure software engineering methodology

Bill Weiss <[email protected]>
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
Mads Rasmussen([email protected])@Mon, Mar 22, 2004 at 10:42:49AM -0300:
> 
> Do any of you have any experience with methodologies for software 
> engineering of secure software?

I have some experience with the Cleanroom method, using the book "Toward
zero-defect programming" by Allan Stavely.

It has shown to be a reliable method for producing error free code.  It is
not a method of developing any faster, you simply shift debugging time
(some of it after the software ships) to design time.

There is a decent review of the book at this site, which was written by
the teacher of the Cleanroom class I took:
http://www.nmt.edu/~shipman/reading/stavely.html

-- 
Bill Weiss
 
The reason the Poisson disk method of supersampling with jitter works is
monkeys. 
        -- Prof. John C. Hart, CS319 (Graphics II)
                University of Illinois, Champaign-Urbana, IL
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.