pretty good assurance
This paper describes the need for pretty good assurance; clearly stated claims about the security properties of systems, accompanied by evidence that explains in clear terms why we should believe that these claims are substantiated. Several different types of threats are identified and their relationships to assurance are explored. The developer's role consuming assurance. Finally, some thoughts on the future are presented.
assurance paper secure systems evidence types threats relationships developer developer's role role future security of data user's role information technology system security properties technological forecasting