It is a common belief that the rise of standardized software certication schemes like the Common Criteria (CC) would give a boost to formal verication, and that software certication may be a killer application for program verication. However, while formal models are indeed used throughout high-assurance certication, verication of the actual implementation is not required by the CC and largely neglected in certication practice { despite the great advances in program verication over the last decade. In this paper we discuss the gap between program verication and CC software certication, and we point out possible uses of code-level program verication in the CC certication process.
['Bernhard Beckert', 'Daniel Bruns', 'Sarah Grebing']
Mind the Gap: Formal Verification and the Common Criteria (Discussion Paper).