February 1, 2019 Outline
Reading: text, §19.2, 20
Due: Homework 2, due February 8, 2019
- Assurance
- Assurance and software life cycle
- Policy and requirements
- Security specifications
- Problems with precision
- Example: System X and Bell-LaPadula
- Justifying requirements
- Techniques to support design assurance
- Subsystem, subcomponent, module
- Design documents
- Security functions summary specification
- External functional specification
- Internal design description
- Justifying design meets requirements
- Reviews