Integration of Formal Proof into Unified Assurance Cases with Isabelle/SACM

09/25/2020
by   Simon Foster, et al.
0

Assurance cases are often required to certify critical systems. The use of formal methods in assurance can improve automation, increase confidence, and overcome errant reasoning. However, assurance cases can never be fully formalised, as the use of formal methods is contingent on models that are validated by informal processes. Consequently, assurance techniques should support both formal and informal artifacts, with explicated inferential links between them. In this paper, we contribute a formal machine-checked interactive language, called Isabelle/SACM, supporting the computer-assisted construction of assurance cases compliant with the OMG Structured Assurance Case Meta-Model. The use of Isabelle/SACM guarantees well-formedness, consistency, and traceability of assurance cases, and allows a tight integration of formal and informal evidence of various provenance. In particular, Isabelle brings a diverse range of automated verification techniques that can provide evidence. To validate our approach, we present a substantial case study based on the Tokeneer secure entry system benchmark. We embed its functional specification into Isabelle, verify its security requirements, and form a modular security case in Isabelle/SACM that combines the heterogeneous artifacts. We thus show that Isabelle is a suitable platform for critical systems assurance.

READ FULL TEXT

page 5

page 9

research
05/15/2019

Mechanised Assurance Cases with Integrated Formal Methods in Isabelle

Assurance cases are often required as a means to certify a critical syst...
research
06/26/2018

Formal Verification of Usage Control Models: A Case Study of UseCON Using TLA+

Usage control models provide an integration of access control, digital r...
research
10/13/2022

A Formal-Methods Approach to Provide Evidence in Automated-Driving Safety Cases

The safety of automated driving systems must be justified by convincing ...
research
07/08/2013

A Knowledge-based Treatment of Human-Automation Systems

In a supervisory control system the human agent knowledge of past, curre...
research
01/04/2020

A Formal Development Cycle for Security Engineering in Isabelle

In this paper, we show a security engineering process based on a formal ...
research
01/18/2021

Computer Aided Formal Design of Swarm Robotics Algorithms

Previous works on formally studying mobile robotic swarms consider neces...
research
05/24/2019

A Behavior-Based Ontology for Supporting Automated Assessment of Interactive Systems

Nowadays many software development frameworks implement Behavior-Driven ...

Please sign up or login with your details

Forgot password? Click here to reset