2022-02-01 16:20:06 EST Patrick Hurley: Gernot will record his presentation and we will make it available on the trustedcomputingcoe.org website
2022-02-01 16:25:50 EST Aleksey Nogin: Is bottom-up verification only meant for fairly low-level "hygene" properties? Or are there any compelling examples of bottom-up verification succeeding in going all the way to functional correctness? Would it even be feasible, if/when the code was not developed with a particular formal specification in mind to begin with?
2022-02-01 16:34:32 EST Peter G Neumann: Brad, I asked you a question this morning that you did not have time to consider relating to total-system assurance. Some people are finally realizing that software cannot be trustworthy if the hardware is not. Do you ever see a future for total system assurance based on hardware proofs that are linked with software proofs that can begin to prove that mission requirements are met -- with appropriate assumptions
2022-02-01 16:37:57 EST Olin Sibert: Hardware often has both complexity and opacity, a very difficult combination.
2022-02-01 16:43:12 EST Renato Levy: @Brad, just to pigback on Peter's point, would a verifiable contract between hardware and software work to construct this proff?
2022-02-01 16:46:33 EST Aleksey Nogin: Thanks, Kevin, makes a lot of sense!
2022-02-01 16:54:00 EST Greg Shannon: if not exlicit on assumptions, at least incrementally improving
2022-02-01 16:56:50 EST Peter G Neumann: EVIDENCE: I generally try to consider what would make evidence forensics-worthy, which again requires trustworthy hardware and software!
2022-02-01 17:05:06 EST Renato Levy: manufacture defects come in 2 modes: intended and unintended, when you talk about supply chain
2022-02-01 17:07:44 EST Ryan Craven: How do evidence needs differ based on role? We often speak of needs from the perspective of system designers (e.g., the primes). What are the kinds of things the deployer / informed consumer need to be asking for? What types of evidence do we think they'd actually make productive use of? (long-ish q, sorry Jason!)
2022-02-01 17:15:24 EST Ryan Craven: Appreciate the great answers, thanks all! Am going to be thinking about the dishwasher of the apocalypse now. :)
2022-02-01 17:21:15 EST Renato Levy: mama says "libraries are like a box of chocolates, you never know what you are going to get!"
2022-02-01 17:31:36 EST Todd Humiston: Thank you Doug! Looking forward to seeing you all tomorrow!!