What software are we running?
•
We cannot verify that desired software is
running on a computer.
•
Stringent software design/review (even
formal verification) doesn’t solve the
problem.
•
Open source does not solve the problem.
–
“Disclosed” source is, however, highly desirable!