3 ms·
There are some counterexamples that worked, though. In Verisoft, they did a whole stack from verified CPU to microkernel to simple OS and compiler. Everything w
by nickpsecurity 8y ago
There are some counterexamples that worked, though. In Verisoft, they did a whole stack from verified CPU to microkernel to simple OS and compiler. Everything was necessarily simple.
http://www.verisoft.de/PublicationPage.html http://www.verisoft.de/PublicationPage.html
The high-assurance community also did a low-complexity GUI:
https://www.acsac.org/2005/papers/54.pdf https://www.acsac.org/2005/papers/54.pdf