4 ms·
"Security" is a stupid goal to have: if your specifications (and their implementation) is correct then the software will be secure. Correctness is a goal of ma
by swiley 7y ago
"Security" is a stupid goal to have: if your specifications (and their implementation) is correct then the software will be secure.
Correctness is a goal of many operating systems.
- java-man 7y agoThis is a very surprising point of view. I hope you don't work with avionics, or nuclear power plant control software, or something that has a potential to inflict a lot of harm. You may not always foresee the requirements for 'correctness'.
- irundebian 7y agoYou can obviously correctly implement a wrong specification which doesn't provide security. Common Criteria distinguishes security in security functions and assurance (the effort spent in the verification of the implementation).