Fine-Grained Inspection for Higher-Assurance Software Security in Open Source

Abstract

This paper reports our experiences in using a finegrained software inspection tool to increase productivity in both software security evidence construction and internals re-engineering, for a higher-assurance open source software project named Xenon. We explain why fined-grained tool-based inspection is essential for a higher-assurance open source project.