To date, the tabular-based SCR (Software C o s t Reduction) method has been applied mostly to the development of embedded control systems. This paper describes the successful application of the SCR method, including the SCR* toolset, to a di erent class of system, a COMSEC (Communications Security) device called CD that must correctly manage encrypted communications. The paper summarizes how the tools in SCR* were u s e d to validate and to debug the SCR speci cation and to demonstrate that the speci cation satis es a set of critical security properties. The development of the CD speci cation involved many tools in SCR*: a s p eci cation editor, a c onsistency checker, a simulator, the TAME interface to the theorem prover PVS, and various other analysis tools. Our experience provides evidence that use of the SCR* toolset to develop high-quality requirements speci cations of moderately complex COMSEC systems is both practical and low-cost.
The work in REF describes the application of the SCR* tool set to a communications security (comsec) device.
SCR: a practical approach to building a high assurance COMSEC system
Proceedings 15th Annual Computer Security Applications Conference (ACSAC'99)
Proceedings 15th Annual Computer Security Applications Conference (ACSAC'99)
Computer Science