Trusted computing base: Difference between revisions

Revision as of 11:27, 22 December 2015

Revision as of 11:21, 29 February 2016

Line 88:

===TCB size===

Due to the aforementioned need to apply costly techniques such as formal verification or manual review, the size of the TCB has immediate consequences on the economics of the TCB assurance process, and the trustworthiness of the resulting product (in terms of the [[expected value|mathematical expectation]] of the number of bugs not found during the verification or review). In order to reduce costs and security risks, the TCB should therefore be kept as small as possible. This is a key argument in the debate opposingpreferring [[microkernel]]s to [[monolithic kernel]]s.<ref>[[Andrew S. Tanenbaum]], [http://www.cs.vu.nl/~ast/reliable-os/ Tanenbaum-Torvalds debate, part II] (12 May 2006)</ref>

==Examples==