Formal Methods For Developing High Assurance Computer Systems: Working Group Report

High assurance computer systems are computer systems where convincing evidence is required that the system satis es a collection of critical properties. To operate correctly, these systems must satisfy properties such as safety and security. Examples of high assurance systems include ight control systems, medical systems, and control systems for nuclear plants. In addition, increased reliance on communications is moving many communications systems, such as telephone networks and cellular and satellite communications systems, into the domain of high assurance systems.