%PDF-1.4 %âăÏÓ 1 0 obj << /Type /Page /Parent 9 0 R /Resources 3 0 R /Contents 2 0 R >> endobj 2 0 obj << /Length 7398 >> stream q 1 i 72 746 468 -12 re W n 0 0 0 1 K 2 J 0 j 1 w 10 M []0 d /GS2 gs 72 745 m 540 745 l 72 742 m 540 742 l S Q q 1 i 30 33 552 728 re W n BT /TT2 1 Tf 10 0 0 10 30 761 Tm 0 g /GS2 gs 0 Tc 0 Tw ( )Tj ET Q BT /TT2 1 Tf 10 0 0 10 72 749.333 Tm 0 0 0 1 k /GS2 gs 0 Tc 0 Tw (O)Tj ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 33 761 Tm 0 g ( )Tj ET Q BT 8 0 0 8 81.219 749.333 Tm 0.25 Tc (UTLINE)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 35 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 122.098 749.333 Tm 0 Tc ( )Tj ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 37 761 Tm 0 g ( )Tj ET Q BT 8 0 0 8 126.598 749.333 Tm 0.25 Tc (FOR)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 39 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 148.16 749.333 Tm 0.2 Tc ( J)Tj ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 42 761 Tm 0 g 0 Tc ( )Tj ET Q BT 8 0 0 8 158.549 749.333 Tm 0.25 Tc (UNE)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 44 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 180.991 749.333 Tm 0.2 Tc [( 3, 2004)-16561(ECS 153 — S)]TJ ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 46 761 Tm 0 g 0 Tc ( )Tj ET Q BT 8 0 0 8 473.496 749.333 Tm 0.25 Tc (PRING)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 48 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 507.5 749.333 Tm 0.2 Tc ( 2004)Tj -43.55 -71.3333 TD 0 Tc [(Version of June 6, 2004 9:04 am)-29193.3(Page 1 of 2)]TJ ET q 1 i 30 33 552 728 re W n BT /TT4 1 Tf 18 0 0 18 51 761 Tm 0 g ( )Tj ET Q BT /TT4 1 Tf 18 0 0 18 213.612 708 Tm [(Outline f)25.2(or J)15.1(une 3, 2004)]TJ ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 55 761 Tm 0 g ( )Tj ET Q BT 10 0 0 10 72 677.333 Tm (Reading)Tj ET q 1 i 30 33 552 728 re W n BT /TT2 1 Tf 10 0 0 10 58 761 Tm 0 g ( )Tj ET Q BT /TT2 1 Tf 10 0 0 10 107.554 677.333 Tm (: Chapters 18, 22.1–22.5, 22.7)Tj ET q 1 i 30 33 552 728 re W n BT /TT4 1 Tf 12 0 0 12 60 761 Tm 0 g ( )Tj ET Q BT /TT4 1 Tf 12 0 0 12 72 654 Tm [(Discussion Pr)18.1(oblem)]TJ ET q 1 i 30 33 552 728 re W n BT /TT2 1 Tf 10 0 0 10 63 761 Tm 0 g ( )Tj ET Q BT /TT2 1 Tf 10 0 0 10 72 636.333 Tm [(Ev)15.1(er w)10(onder wh)5.1(y people need to write program speci)]TJ /TT5 1 Tf 21.4068 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD [(cations and requirements carefully? )18.1(The answer is that those )]TJ -21.963 -1.2 TD (speci)Tj /TT5 1 Tf 2.0547 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD [(cations seem to li)25.1(v)15.1(e)0( fore)25.1(v)15.1(e)0(r)55.2(.)0( Here’)55.2(s an e)15.1(xample:)]TJ -2.6108 -1.5 TD [(The United States Standard railroad g)5.1(auge \(distance between the rails\) is 4 feet, 8.5 inches. )18.1(That’)55.2(s an e)15.1(xceedingly )]TJ 0 -1.2 TD [(odd number)55.2(. )30(Wh)5.1(y w)10(as that g)5.1(auge used? Because that’)55.2(s the w)10(ay the)15.1(y b)20(uilt them in England, and the United States )]TJ T* [(railroads were b)20(uilt by English e)15.1(xpatriates. )30(Wh)5.1(y did the English people b)20(uild them lik)10(e that? Because the )]TJ /TT5 1 Tf 42.7772 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD (rst rail )Tj -43.3334 -1.2 TD [(lines were b)20(uilt by the same people who b)20(uilt the pre-railroad tramw)10(ays, and that’)55.2(s the g)5.1(auge the)15.1(y used.)]TJ 0 -1.5 TD -0.0219 Tw [(So, wh)5.1(y did “the)15.1(y” use that g)5.1(auge? Because the people who b)20(uilt the tramw)10(ays used the same jigs and tools that the)15.1(y )]TJ 0 -1.2 TD 0 Tw [(used for b)20(uilding w)10(agons, which used that wheel spacing. Okay! )30(Wh)5.1(y did the w)10(agons use that odd wheel spacing? )]TJ T* [(W)80.1(ell, if the)15.1(y tried to use an)15.1(y other spacing the w)10(agons w)10(ould break on some of the old, long distance roads, because )]TJ T* [(that’)55.2(s the spacing of the old wheel ruts.)]TJ 0 -1.4999 TD -0.0108 Tw [(So who b)20(uilt these old rutted roads? )18.1(The )]TJ /TT5 1 Tf 16.5561 0 TD 0 Tw (̃)Tj /TT2 1 Tf 0.5562 0 TD -0.0108 Tw [(rst long distance roads in Europe were b)20(uilt by Imperial Rome for the ben-)]TJ -17.1123 -1.2 TD 0 Tw (e)Tj /TT5 1 Tf 0.4438 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD -0.0028 Tw [(t of their le)15.1(gions. )18.1(The roads ha)20(v)15.1(e)0( been used e)25.1(v)15.1(er since. )55.2(And the ruts? )18.1(The initial ruts, which e)25.1(v)15.1(eryone else had to )]TJ -1 -1.2 TD -0.0057 Tw [(match for fear of destro)10(ying their w)10(agons, were )]TJ /TT5 1 Tf 19.2327 0 TD 0 Tw (̃)Tj /TT2 1 Tf 0.5562 0 TD -0.0057 Tw [(rst made by Roman w)10(ar chariots. Since the chariots were made for )]TJ -19.7889 -1.2 TD 0 Tw [(or by Imperial Rome, the)15.1(y were all alik)10(e in the matter of wheel spacing.)]TJ 0 -1.5 TD [(Thus, we ha)20(v)15.1(e)0( the answer to the original questions. )18.1(The United States standard railroad g)5.1(auge of 4 feet, 8.5 inches )]TJ 0 -1.2 TD -0.0334 Tw [(deri)25.1(v)15.1(es from the original speci)]TJ /TT5 1 Tf 12.0445 0 TD 0 Tw (̃)Tj /TT2 1 Tf 0.5562 0 TD -0.0334 Tw [(cation for an Imperial Roman army w)10(ar chariot. Speci)]TJ /TT5 1 Tf 21.5703 0 TD 0 Tw (̃)Tj /TT2 1 Tf 0.5562 0 TD -0.0334 Tw [(cations and b)20(ureaucracies li)25.1(v)15.1(e)0( )]TJ -34.727 -1.2 TD 0 Tw [(fore)25.1(v)15.1(e)0(r)55.2(.)0( So, the ne)15.1(xt time you are handed a speci)]TJ /TT5 1 Tf 19.66 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD [(cation and w)10(onder what horse’)55.2(s rear came up with it, you may be )]TJ -20.2162 -1.2 TD -0.0169 Tw [(e)15.1(xactly right, because the Imperial Roman chariots were made to be just wide enough to accommodate the back-ends )]TJ T* 0 Tw [(of tw)10(o w)10(ar horses. )]TJ 16.8374 -1.5 TD (— )Tj ET q 1 i 30 33 552 728 re W n BT /TT7 1 Tf 10 0 0 10 66 761 Tm 0 g ( )Tj ET Q BT /TT7 1 Tf 10 0 0 10 252.874 393.334 Tm [(sour)37.1(ce unknown, b)20(ut cir)37.1(culated on USENET and other messa)10(g)10(e)0( systems)]TJ ET q 1 i 30 33 552 728 re W n BT /TT4 1 Tf 12 0 0 12 68 761 Tm 0 g ( )Tj ET Q BT /TT4 1 Tf 12 0 0 12 72 370 Tm [(Outline f)25.2(or the Day)]TJ ET q 1 i 30 33 552 728 re W n BT /TT2 1 Tf 10 0 0 10 71 761 Tm 0 g ( )Tj ET Q BT /TT2 1 Tf 10 0 0 10 72 352.334 Tm [(1.)-1050(Assurance)]TJ 1.8 -1.3 TD [(a.)-1106.2(W)80.1(aterf)10(all Life Cycle Model)]TJ 1.8 -1.3 TD [(i.)-1272.2(Requirements de)]TJ /TT5 1 Tf 8.5481 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD (nition and analysis)Tj -9.1042 -1.3 TD [(ii.)-994.3(System and softw)10(are design)]TJ T* [(iii.)-716.5(Implementation and unit testing)]TJ T* [(i)25.1(v)65.2(.)-862.5(Inte)15.1(gration and system testing)]TJ T* [(v)65.2(.)-1115.2(Operation and maintenance)]TJ -1.8 -1.3 TD [(b)40(.)-1090(Other models)]TJ 1.8 -1.3 TD [(i.)-1272.2(Exploratory programming)]TJ T* [(ii.)-994.3(Prototyping)]TJ T* [(iii.)-716.5(F)15.1(ormal transformation)]TJ T* [(i)25.1(v)65.2(.)-862.5(System assembly from re-usable components)]TJ T* [(v)65.2(.)-1115.2(Extreme programming)]TJ -3.6 -1.5 TD [(2.)-1050(Malicious logic)]TJ 1.8 -1.5 TD [(a.)-1106.2(Quickly re)25.1(vie)25.1(w )18.1(T)35.2(rojan horses, viruses, bacteria; include animal and )18.1(Thompson’)55.2(s compiler trick)]TJ 0 -1.3 TD [(b)40(.)-1090(Logic Bombs, )30(W)80.1(orms \(Schoch and Hupp\))]TJ -1.8 -1.5 TD [(3.)-1050(Ideal: program to detect malicious logic)]TJ 1.8 -1.5 TD [(a.)-1106.2(Can be sho)25.1(wn: not possible to be precise in most general case)]TJ 0 -1.3 TD [(b)40(.)-1090(Can detect all such programs if willing to accept f)10(alse positi)25.1(v)15.1(e)0(s)]TJ T* [(c.)-1106.2(Can constrain case enough to locate speci)]TJ /TT5 1 Tf 18.4607 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD (c malicious logic)Tj -19.0168 -1.3 TD [(d.)-1050(Can use:)]TJ ET endstream endobj 3 0 obj << /ProcSet [ /PDF /Text ] /Font << /TT2 4 0 R /TT4 5 0 R /TT5 6 0 R /TT7 7 0 R >> /ExtGState << /GS2 8 0 R >> >> endobj 4 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 151 /Widths [ 250 333 0 0 0 0 0 0 333 333 0 0 250 333 250 0 500 500 500 500 500 500 500 500 500 500 278 278 0 0 0 444 0 722 667 667 0 611 556 722 722 333 389 0 611 889 722 722 556 722 667 556 611 722 722 944 0 0 0 0 0 0 0 0 0 444 500 444 500 444 333 500 500 278 278 500 278 778 500 500 500 500 333 389 278 500 500 722 500 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 333 444 444 0 500 1000 ] /Encoding /WinAnsiEncoding /BaseFont /Times-Roman /FontDescriptor 13 0 R >> endobj 5 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 121 /Widths [ 250 0 0 0 0 0 0 0 0 0 0 0 250 0 0 0 500 0 500 500 500 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 722 0 0 0 0 0 500 0 0 0 0 778 611 0 722 0 0 0 0 0 0 0 0 0 0 0 0 0 0 500 556 444 556 444 333 500 556 278 0 0 278 833 556 500 0 0 444 389 333 556 0 0 0 500 ] /Encoding /WinAnsiEncoding /BaseFont /Times-Bold /FontDescriptor 14 0 R >> endobj 6 0 obj << /Type /Font /Subtype /TrueType /FirstChar 222 /LastChar 222 /Widths [ 556 ] /Encoding /MacRomanEncoding /BaseFont /Times-Roman /FontDescriptor 15 0 R >> endobj 7 0 obj << /Type /Font /Subtype /TrueType /FirstChar 32 /LastChar 121 /Widths [ 250 0 0 0 0 0 0 0 0 0 0 0 250 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 611 0 0 0 0 0 0 0 0 667 0 0 0 0 500 556 722 0 0 0 0 0 0 0 0 0 0 0 500 500 444 500 444 0 500 500 278 0 444 278 722 500 500 0 0 389 389 278 500 0 667 0 444 ] /Encoding /WinAnsiEncoding /BaseFont /Times-Italic /FontDescriptor 16 0 R >> endobj 8 0 obj << /Type /ExtGState /SA true /SM 0.02 /OP false /op false /OPM 1 /BG2 /Default /UCR2 /Default /HT /Default /TR2 /Default >> endobj 9 0 obj << /Type /Pages /Kids [ 1 0 R 10 0 R ] /Count 2 /MediaBox [ 0 0 612 792 ] >> endobj 10 0 obj << /Type /Page /Parent 9 0 R /Resources 12 0 R /Contents 11 0 R >> endobj 11 0 obj << /Length 2096 >> stream q 1 i 72 746 468 -12 re W n 0 0 0 1 K 2 J 0 j 1 w 10 M []0 d /GS2 gs 72 745 m 540 745 l 72 742 m 540 742 l S Q q 1 i 30 33 552 728 re W n BT /TT2 1 Tf 10 0 0 10 74 761 Tm 0 g /GS2 gs 0 Tc 0 Tw ( )Tj ET Q BT /TT2 1 Tf 10 0 0 10 72 749.333 Tm 0 0 0 1 k /GS2 gs 0 Tc 0 Tw (O)Tj ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 77 761 Tm 0 g ( )Tj ET Q BT 8 0 0 8 81.219 749.333 Tm 0.25 Tc (UTLINE)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 79 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 122.098 749.333 Tm 0 Tc ( )Tj ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 81 761 Tm 0 g ( )Tj ET Q BT 8 0 0 8 126.598 749.333 Tm 0.25 Tc (FOR)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 83 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 148.16 749.333 Tm 0.2 Tc ( J)Tj ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 86 761 Tm 0 g 0 Tc ( )Tj ET Q BT 8 0 0 8 158.549 749.333 Tm 0.25 Tc (UNE)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 88 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 180.991 749.333 Tm 0.2 Tc [( 3, 2004)-16561(ECS 153 — S)]TJ ET q 1 i 30 33 552 728 re W n BT 8 0 0 8 90 761 Tm 0 g 0 Tc ( )Tj ET Q BT 8 0 0 8 473.496 749.333 Tm 0.25 Tc (PRING)Tj ET q 1 i 30 33 552 728 re W n BT 10 0 0 10 92 761 Tm 0 g 0 Tc ( )Tj ET Q BT 10 0 0 10 507.5 749.333 Tm 0.2 Tc ( 2004)Tj -43.55 -71.3333 TD 0 Tc [(Version of June 6, 2004 9:04 am)-29193.3(Page 2 of 2)]TJ 3.6 67.7333 TD [(i.)-1272.2(T)80.1(ype chcking \(data vs. instructions\))]TJ 0 -1.3 TD [(ii.)-994.3(Limiting rights \(sandboxing\))]TJ T* [(iii.)-716.5(Limiting sharing)]TJ T* [(i)25.1(v)65.2(.)-862.5(Pre)25.1(v)15.1(enting or detecting changes to )]TJ /TT5 1 Tf 15.8389 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD (les)Tj -16.3951 -1.3 TD [(v)65.2(.)-1115.2(Pre)25.1(v)15.1(ent code from acting be)15.1(yond speci)]TJ /TT5 1 Tf 17.3228 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD (cation \(proof carrying code\))Tj -17.879 -1.3 TD [(vi.)-772.2(Check statistical characteristics of programs \(more authors than kno)25.1(wn, constructs in object )]TJ /TT5 1 Tf 38.7364 0 TD (̃)Tj /TT2 1 Tf 0.5562 0 TD (les not )Tj -37.4925 -1.2 TD [(corresponding to an)15.1(ything in the source\))]TJ ET endstream endobj 12 0 obj << /ProcSet [ /PDF /Text ] /Font << /TT2 4 0 R /TT5 6 0 R >> /ExtGState << /GS2 8 0 R >> >> endobj 13 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 662 /Descent -250 /Flags 34 /FontBBox [ -168 -218 1000 898 ] /FontName /Times-Roman /ItalicAngle 0 /StemV 84 /XHeight 450 /StemH 84 >> endobj 14 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 676 /Descent -250 /Flags 262178 /FontBBox [ -168 -218 1000 935 ] /FontName /Times-Bold /ItalicAngle 0 /StemV 133 /XHeight 461 /StemH 139 >> endobj 15 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 662 /Descent -250 /Flags 34 /FontBBox [ -168 -218 1000 898 ] /FontName /Times-Roman /ItalicAngle 0 /StemV 84 /XHeight 450 /StemH 84 >> endobj 16 0 obj << /Type /FontDescriptor /Ascent 750 /CapHeight 653 /Descent -250 /Flags 98 /FontBBox [ -169 -217 1010 883 ] /FontName /Times-Italic /ItalicAngle -15 /StemV 76 /XHeight 441 /StemH 76 >> endobj 17 0 obj << /S /D >> endobj 18 0 obj << /Nums [ 0 17 0 R ] >> endobj 19 0 obj << /CreationDate (D:20040606090557-07'00') /ModDate (D:20040712142230-07'00') /Producer (PSNormalizer.framework) >> endobj 20 0 obj << /Type /Catalog /Pages 9 0 R /PageLabels 18 0 R /Metadata 23 0 R >> endobj 23 0 obj << /Type /Metadata /Subtype /XML /Length 824 >> stream 2004-06-06T09:05:57-07:00 2004-07-12T14:22:30-07:00 PSNormalizer.framework 2004-06-06T09:05:57-07:00 2004-07-12T14:22:30-07:00 2004-07-12T14:22:30-07:00 endstream endobj xref 0 24 0000000021 65535 f 0000000016 00000 n 0000000102 00000 n 0000007553 00000 n 0000007687 00000 n 0000008250 00000 n 0000008665 00000 n 0000008846 00000 n 0000009257 00000 n 0000009408 00000 n 0000009506 00000 n 0000009595 00000 n 0000011745 00000 n 0000011858 00000 n 0000012070 00000 n 0000012287 00000 n 0000012499 00000 n 0000012714 00000 n 0000012745 00000 n 0000012789 00000 n 0000012923 00000 n 0000000022 00002 f 0000000000 00001 f 0000013015 00000 n trailer << /Size 24 /Info 19 0 R /Root 20 0 R /ID[<373d54f1af3598129e2e9a074e6b2e27><70f4a0a166c032eafe490fa90be4516b>] >> startxref 13923 %%EOF