Security Benchmarking using Partial Verification

Implementation-level vulnerabilities are a persistent threat to the security of computing systems. We propose using the results of partially-successful verification attempts to place a numerical upper bound on the insecurity of systems, in order to motivate improvement.

• Type: Conference
• Year: 2008
• Where: USS
• Authors: Thomas E. Hart, Marsha Chechik, David Lie
• Keywords: Numerical Upper Bound, Operating System, Partially-successful Verification Attempts, Persistent Threat, USS 2008