High Integrity Software: The SPARK Approach to Safety and Security

Rating:
Summary: Excellent Book for Professionals
Review: If you are in the business of creating serious software that is safety critical or security related then this book is essential reading, it is also an excellent guide if you have an interest in how such software is created. Focusing on how the SPARK language assures correctness throughout the construction of the software and how the supporting tools allow analysis of the resulting program, the book forms an essential reference work for users of the SPARK approach to developing software.

This book consists of three main parts plus an appendix.
The first part consists of an overview of why SPARK was created and the background to the language and tools.
Part two looks in detail at the SPARK language.
Part three considers the tools available; various code analysis techniques and design issues that can help in the development of high integrity software. Three small case studies are included, together with some examples of real projects where SPARK has been used in large scale industrial projects.
The Appendix covers the syntax of SPARK, how to use the CD-ROM and some notes on the continuing developments of the evolution of SPARK.
The included CD-ROM allows you to try out some of what the book teaches and includes limited versions of the SPARK Examiner toolset.

In this book John Barnes writes in a style similar to his other texts; this is rather like a guiding teacher leaning over your shoulder as you work at the computer, pointing out things to observe and illustrating with snippets of code or background information. It is a style that has been criticised by some, but I find it rather reassuring as you are guided along the path to understanding. The inclusion of a CD-ROM also allows you to understand by doing, and although the tool is limited in capability, it is possible to get a good flavour of the capabilities of its parent product.

This book replaces the previous SPARK book: "High Integrity Ada : The SPARK Approach". Barnes covers the revisions and enhancements of the SPARK language described in his original book, if you are an existing user of SPARK, you need this issue to stay up-to-date with the important revisions of the language and tools. This book tries to distance itself somewhat from Ada95, possibly because of the image that language has with less well-informed programmers, but since you need an Ada compiler to produce executables from SPARK programs it would be fair to point out that SPARK is firmly rooted in Ada95.

Creating high integrity software is a disciplined process, and the book is very much based in the practical application of SPARK in building high integrity software. The SPARK language is based solid mathematical foundations, but there is no detailed descriptions at this level, the book rightly points out that they are there and then moves on towards giving you the practical information you need to write SPARK programs. Mastering SPARK gives you unprecedented skills in the highly desirable field of producing high integrity software.

Thus spake the Master programmer:
"A well written program is its own heaven; a poorly written program is its own hell."
- - from The Tao of Programming