Provably correct microkernel (seL4)

[b.g.miller at gmail.com (Bobby Miller)]

I might argue that it may fix problems that aren't fixable otherwise.
My experience in this area is very old, but I found that the biggest benefit
of formal methods was not so much the proof but the flaws discovered and
fixed on the way to the proof.



> In conclusion, it seems an awful effort to fix half the problem, I'd
> expect,
> though cant prove, that a combination of other secure development processes
> working together will get better results with less overall effort.
>
> CJC
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://krvw.com/pipermail/sc-l/attachments/20091002/4627e9c6/attachment.htm>