Extending Source Code Generators for Evidence-Based Software Certification

Ewen Denney, Bernd Fischer
2006 Second International Symposium on Leveraging Applications of Formal Methods, Verification and Validation (isola 2006)  
Automated code generation offers many advantages over manual software development but treating generators as trusted black boxes raise problems for certification. Traditional process-oriented approaches to certification thus require that the generator be verified to the same level of assurance as the generated code, but this is infeasible for realistic generators. However, generators can be extended to support an evidencebased approach to certification. By careful design of the trusted kernel,
more » ... he trusted kernel, assurance of the generator itself is not required. In this paper, we describe several related extensions to two in-house code generators to provide two forms of evidence along with the code: safety proofs and safety explanations. We also describe how additionally provided links are used to trace between the code and the safety artifacts.
doi:10.1109/isola.2006.76 dblp:conf/isola/DenneyF06 fatcat:b4kmwijpsjdobdtzmpr4wbmp3y