scholarly journals Mind the Gap: Formal Verification and the Common Criteria (Discussion Paper)

10.29007/w9b3 ◽  
2018 ◽  
Author(s):  
Bernhard Beckert ◽  
Daniel Bruns ◽  
Sarah Grebing

It is a common belief that the rise of standardized software certification schemes like the Common Criteria (CC) would give a boost to formal verification, and that software certification may be a killer application for program verification. However, while formal models are indeed used throughout high-assurance certification, verification of the actual implementation is not required by the CC and largely neglected in certification practice - despite the great advances in program verification over the last decade.In this paper we discuss the gap between program verification and CC software certification, and we point out possible uses of code-level program verification in the CC certification process.

2008 ◽  
pp. 1537-1549
Author(s):  
Rayford B. Vaugh

Corporate decisions concerning the purchase of security software and hardware appliances are often made based simply on the recommendations of the technical staff, the budget process (return on investment arguments), and/or a sales presentation and assertions. This chapter addresses the notion of trusted products and assurance in those products (i.e., confidence in the correct operation of a product) and how assurance is gained through independent review and testing. Early attempts to measure assurance in trusted products are described (some products today still refer to these procedures). Modern approaches to measuring assurance will be discussed in the context of ISO Standard 15408 (the Common Criteria (CC)). Current U.S. federal government policy concerning the use of evaluated products is presented, as well as a discussion of why industrial organizations may wish to consider such products.


Author(s):  
Rayford B. Vaugh

Corporate decisions concerning the purchase of security software and hardware appliances are often made based simply on the recommendations of the technical staff, the budget process (return on investment arguments), and/or a sales presentation and assertions. This chapter addresses the notion of trusted products and assurance in those products (i.e., confidence in the correct operation of a product) and how assurance is gained through independent review and testing. Early attempts to measure assurance in trusted products are described (some products today still refer to these procedures). Modern approaches to measuring assurance will be discussed in the context of ISO Standard 15408 (the Common Criteria (CC)). Current U.S. federal government policy concerning the use of evaluated products is presented, as well as a discussion of why industrial organizations may wish to consider such products.


Author(s):  
Sylvia Berryman

This work challenges the common belief that Aristotle’s virtue ethics is founded on an appeal to human nature, an appeal that is thought to be intended to provide both substantive ethical advice and justification for the demands of ethics. It is argued that it is not Aristotle’s intent, but the view is resisted that Aristotle was blind to questions of the source or justification of his ethical views. Aristotle’s views are interpreted as a ‘middle way’ between the metaphysical grounding offered by Platonists and the scepticism or subjectivist alternatives articulated by others. The commitments implicit in the nature of action figure prominently in this account: Aristotle reinterprets Socrates’ famous paradox that no one does evil willingly, taking it to mean that a commitment to pursuing the good is implicit in the very nature of action. This approach is compared to constructivism in contemporary ethics.


Author(s):  
Giacomo Dalla Chiara ◽  
Klaas Fiete Krutein ◽  
Andisheh Ranjbari ◽  
Anne Goodchild

As e-commerce and urban deliveries spike, cities grapple with managing urban freight more actively. To manage urban deliveries effectively, city planners and policy makers need to better understand driver behaviors and the challenges they experience in making deliveries. In this study, we collected data on commercial vehicle (CV) driver behaviors by performing ridealongs with various logistics carriers. Ridealongs were performed in Seattle, Washington, covering a range of vehicles (cars, vans, and trucks), goods (parcels, mail, beverages, and printed materials), and customer types (residential, office, large and small retail). Observers collected qualitative observations and quantitative data on trip and dwell times, while also tracking vehicles with global positioning system devices. The results showed that, on average, urban CVs spent 80% of their daily operating time parked. The study also found that, unlike the common belief, drivers (especially those operating heavier vehicles) parked in authorized parking locations, with only less than 5% of stops occurring in the travel lane. Dwell times associated with authorized parking locations were significantly longer than those of other parking locations, and mail and heavy goods deliveries generally had longer dwell times. We also identified three main criteria CV drivers used for choosing a parking location: avoiding unsafe maneuvers, minimizing conflicts with other users of the road, and competition with other commercial drivers. The results provide estimates for trip times, dwell times, and parking choice types, as well as insights into why those decisions are made and the factors affecting driver choices.


2012 ◽  
Vol 2012 ◽  
pp. 1-25 ◽  
Author(s):  
Andrej Sarjaš ◽  
Rajko Svečko ◽  
Amor Chowdhury

This paper presents the synthesis of an optimal robust controller with the use of pole placement technique. The presented method includes solving a polynomial equation on the basis of the chosen fixed characteristic polynomial and introduced parametric solutions with a known parametric structure of the controller. Robustness criteria in an unstructured uncertainty description with metrics of normℋ∞are for a more reliable and effective formulation of objective functions for optimization presented in the form of a spectral polynomial with positivity conditions. The method enables robust low-order controller design by using plant simplification with partial-fraction decomposition, where the simplification remainder is added to the performance weight. The controller structure is assembled of well-known parts such as disturbance rejection, and reference tracking. The approach also allows the possibility of multiobjective optimization of robust criteria, application of mixed sensitivity problem, and other closed-loop limitation criteria, where the common criteria function can be composed from different unrelated criteria. Optimization and controller design are performed with iterative evolution algorithm.


Utilitas ◽  
2013 ◽  
Vol 26 (2) ◽  
pp. 218-220
Author(s):  
KARL EKENDAHL ◽  
JENS JOHANSSON

In a recent article, Joyce L. Jenkins challenges the common belief that desire satisfactionists are committed to the view that a person's welfare can be affected by posthumous events. Jenkins argues that desire satisfactionists can and should say that posthumous events only play an epistemic role: though such events cannot harm me, they can reveal that I have already been harmed by something else. In this response, however, we show that Jenkins's approach collapses into the view she aims to avoid.


2021 ◽  
pp. 026858092199852
Author(s):  
Aneta Piekut ◽  
Gill Valentine

In this article, the authors move away from approaching generations as static categories and explore how ordinary people, as opposed to scholars, distinguish generations and justify their different responses to cultural diversity in terms of ethnicity, race and religion/belief. The analysis draws on 90 in-depth interviews with 30 residents in the Polish capital, Warsaw (2012–2013). Through approaching generation as an analytical category, the authors identify various differentiating narratives which the study participants employed to draw boundaries between generations, reinforcing the common belief that the youngest Poles are most accepting of diversity. Although generations are seen as the axis of difference, conditioning generation-specific responses to diversity, the accounts emerging from the interviews reveal their relational nature, as well as similarities and points of connection between their experiences.


2011 ◽  
Vol 23 (1) ◽  
pp. 45-64 ◽  
Author(s):  
Stephanie M. Bryant ◽  
Dan Stone ◽  
Benson Wier

ABSTRACT: In two studies, we explore whether creativity is essential—or antithetical—to professional accounting work. In Study 1, archival analysis of U.S. Department of Labor data indicates that: (1) professional accounting work requires no less creativity than do three competing professions and a diverse sample of U.S. occupations, and (2) greater creativity may be required in financial than in auditing and taxation accounting work. In Study 2, a survey contrasts the self-assessed and number-of-uses creativity of governmental accounting professionals and Master’s of Accountancy (M.Acc.) students with that of M.B.A. students. Results indicate lower creativity among accountants and M.Acc. students compared with M.B.A. students, and no systematic relationship between ethics and creativity. We conclude that while creativity matters to accounting work—more to some areas of accounting practice than others—accountancy education and work may attract or reward entrants with less than desirable levels of creativity, perhaps due to the common belief that creativity is unneeded in, or even deleterious to, professional accountancy work.


Sign in / Sign up

Export Citation Format

Share Document