Trusted Computing Exemplar: Quality Assurance Plan
Loading...
Authors
Clark, Paul C.
Irvine, Cynthia E.
Nguyen, Thuy D.
Subjects
Machinery control systems
MCS
life cycle security
high assurance
system security
trustworthy systems
MCS
life cycle security
high assurance
system security
trustworthy systems
Advisors
Date of Issue
2014-12-12
Date
December 12, 2014
Publisher
Monterey, California. Naval Postgraduate School
Language
Abstract
This document describes the Life Cycle Management Plan for the development of a high assurance secure product. A high assurance product is one for which its users have a high level of confidence that its security policies will be enforced continuously and correctly. Such products are constructed so that they can be analyzed for these characteristics. Lifecycle activities ensure that the product reflects the intent to ensure that the product is trustworthy and that vigorous efforts have been made to ensure the absence of unspecified functionality, whether accidental or intentional. In particular, this document expands and unifies the testing requirements that are stated in the Life Cycle Management Plan, the Configuration Management Plan, and the Software Development Standards. This Quality Assurance (QA) Plan emphasizes requirements, restrictions, standards, responsibilities, etc., for these required tests. Specifically excluded from this plan, however, are the formal and semi-formal work, code correspondence, and covert channel analysis. In addition, there will need to be independent re-testing and penetration testing performed. It is also recognized that quality means more than just source code testing (such as conformance to documentation standards, correct spelling, etc.); those issues are currently covered in other documents.
Type
Technical Report
Description
Series/Report No
Department
Identifiers
NPS Report Number
NPS-CAG-14-009
Sponsors
Prepared for United States Navy, OPNAV N2/N6 and funded in part by United States Navy, OPNAV N2/N6. A portion of the material presented here is based upon work supported by the National Science Foundation under Grant No. CNS-0430566 and CNS-0430598.
Funder
Format
Citation
Distribution Statement
Approved for public release; distribution is unlimited.
Rights
This publication is a work of the U.S. Government as defined in Title 17, United States Code, Section 101. Copyright protection is not available for this work in the United States.