Evaluating the Assessment of Software Fault-Freeness
  We propose to validate experimentally a theory of software certification that proceeds from assessment of confidence in fault-freeness (due to standards) to conservative prediction of failure-free operation. 
John Rushby, Bev Littlewood, Lorenzo Strigini
cs.SE