Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Note

Software Component Certification: 10 Useful Distinctions

  • September 2004
  • By Kurt C. Wallnau
  • This 2004 report discusses 10 useful distinctions that can help in understanding different aspects of certification in the context of software components.
  • Publisher: Software Engineering Institute
    CMU/SEI Report Number: CMU/SEI-2004-TN-031
  • Abstract

    Using software components to develop mission-critical systems poses a number of technical, organizational, and economic challenges. One persistent and largely unaddressed challenge is how the consumers of software components—that is, the developers of mission-critical systems—can obtain a meaningful level of trust in the runtime behavior of software components. The most frequently cited concerns are centered on issues of security; for example, trust that a component does not contain malicious code or exhibit vulnerabilities that can be exploited by malicious code. There are, however, other concerns about software component behavior that can be just as important. For example, in an embedded weapon system, it may be crucial to trust that a component will always execute a function within a particular time bound or never introduce unbounded priority inversion. 

    Certification is a practical, proven means of establishing trust in various sorts of things in other disciplines and is, therefore, a natural contender for developing trust in software components. This technical note does not propose a particular certification regimen for components. Rather, it introduces a series of 10 distinctions that can help in understanding different aspects of certification in the context of software components.

  • Download

Cite This Report

SEI

Wallnau, Kurt. Software Component Certification: 10 Useful Distinctions. CMU/SEI-2004-TN-031. Software Engineering Institute, Carnegie Mellon University. 2004. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=6985

IEEE

Wallnau. Kurt, "Software Component Certification: 10 Useful Distinctions," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2004-TN-031, 2004. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=6985

APA

Wallnau, Kurt. (2004). Software Component Certification: 10 Useful Distinctions (CMU/SEI-2004-TN-031). Retrieved March 30, 2017, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=6985

CHI

Kurt Wallnau. Software Component Certification: 10 Useful Distinctions (CMU/SEI-2004-TN-031). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2004. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=6985

MLA

Wallnau, Kurt. 2004. Software Component Certification: 10 Useful Distinctions (Technical Report CMU/SEI-2004-TN-031). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=6985

BibTex

@techreport{WallnauSoftwareComponent2004,
title={Software Component Certification: 10 Useful Distinctions},
author={Kurt Wallnau},
year={2004},
number={CMU/SEI-2004-TN-031},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=6985} }