open-DO » SPARK http://www.open-do.org Toward a cooperative and open framework for the development of certifiable software Fri, 03 Feb 2012 16:13:41 +0000 en hourly 1 Cookbook for Applying Formal Methods in Industry http://www.open-do.org/2011/07/13/cookbook-for-applying-formal-methods-in-industry/ http://www.open-do.org/2011/07/13/cookbook-for-applying-formal-methods-in-industry/#comments Wed, 13 Jul 2011 08:07:40 +0000 Yannick Moy http://www.open-do.org/?p=1798 If you read a bit of French, you’ll be happy to know that Hermes Publishing has just issued the first of a three-volume series on Utilisations industrielles des techniques formelles (use of formal methods in industry). This first volume is concerned with abstract interpretation techniques and tools. As such, we at AdaCore contributed a chapter on the static analyzer CodePeer that we develop. Other chapters describe the use of other tools based on abstract interpretation and formal methods in a broader sense: Polyspace, Astrée, Frama-C, etc. I liked in particular the discussion about the use of formal methods for in DO-178C context, and the combination of formal verification and testing, in chapter 7 by Dassault Aviation Méthodes formelles et conformité au standard DO-178C/ED-12C en aéronautique. We do have solutions in project Hi-Lite to some of the problems they raised.

Here is the book, that you can also find at your preferred web merchant.

The two remaining books on the B methods, Scade, SPARK and others, should be published by the end of 2011. An English version of the three books is expected to be published in 2012.

]]> http://www.open-do.org/2011/07/13/cookbook-for-applying-formal-methods-in-industry/feed/ 1 NIST paper highlights language vulnerabilities http://www.open-do.org/2011/05/09/nist-paper-highlights-language-vulnerabilities/ http://www.open-do.org/2011/05/09/nist-paper-highlights-language-vulnerabilities/#comments Mon, 09 May 2011 14:38:51 +0000 Jamie Ayre http://www.open-do.org/?p=1730 A recently published paper by the National Institute of Standards and Technology (NIST), examines software assurance tools as a fundamental resource to improve quality in today’s software applications. It looks at the behavior of one class of software assurance tool: the source code security analyzer. Because many software security weaknesses are introduced at the implementation phase, using a source code security analyzer should help reduce the number of security vulnerabilities in software.

The report – Source Code Security Analysis Tool Functional Specification Version 1.1 (NIST Special Publication 500-268 v1.1) – defines a minimum capability to help software professionals understand how a tool can help meet their software security assurance needs. The example languages studied are C, C++, Java and SPARK. The NIST report identifies the languages’ vulnerabilities. As you would expect, the SPARK language comes out well.

]]> http://www.open-do.org/2011/05/09/nist-paper-highlights-language-vulnerabilities/feed/ 3 A “Lighter” Introduction to Hi-Lite http://www.open-do.org/2010/05/10/a-lighter-introduction-to-hi-lite/ http://www.open-do.org/2010/05/10/a-lighter-introduction-to-hi-lite/#comments Mon, 10 May 2010 10:50:39 +0000 Yannick Moy http://www.open-do.org/?p=1330 introduction to Hi-Lite in which we describe the application of the various tools and techniques that are part of Hi-Lite to a very simple program. ]]> http://www.open-do.org/2010/05/10/a-lighter-introduction-to-hi-lite/feed/ 0