FMCP 2024 — NIST Workshop on Formal Methods within Certification Programs 2024

Topics: Topics for discussion include: Software formal methods of different families: model checking, interactive proof, use of SMT and SAT solvers, static analysis How formal methods can fit within existing validation programs and potential impacts on stakeholders, e.g., pragmatics of allowing some current testing-based requirements to be fulfilled by submitting machine-checkable proofs or running certain automated tool Approaches to reduce the requirement for NIST and other standards authorities to trust vendors to validate their systems correctly, e.g., thanks to rechecking of formal proof Opportunities to build community understanding of formal methods through discussion in NIST reports, e.g., on how to think about the trust consequences of different combinations of formal tools Pragmatic paths to adoption that use less rigorous methods with shallower learning curves Overviews of current and upcoming NIST programs and tools (like the Automated Cryptographic Validation Testing System [ACVTS] and Automated Cryptographic Module Validation Protocol [AMVP]) that may both be of direct interest to formal-methods researchers and serve as examples of current modes of interaction with vendors