assumption mismatches (between the software-as-designed and the software-asoperated) have not introduced new security vulnerabilities into the system.
5.1.2 Using Formal Methods to Achieve Secure Software
Formal methods are an adaptation to software development of certain aspects
of mathematics developed in 19th and 20th century mathematics. A formal