That&#x27;s hard to say. I need to re-research it and write another essay on it using info I&#x27;ve learned recently. Here&#x27;s a few issues:<p>- High-assurance is a barely developed field due to neglect. This means each new problem is essentially a R&amp;D problem then an engineering problem. That increases cost and risk while slowing things down a bit. Good news is there&#x27;s examples of many kinds of things to work with out of both proprietary and CompSci (mainly) with almost nothing out of FOSS despite them being attracted to interesting, challenging problems. Weird but that&#x27;s the spread.<p>- High-assurance applies rigorous techniques to systematically eliminate problems in requirements, design, code, deployment and maintenance. The extra care increases both upfront investment and time-to-market. The latter is often critical as whoever has more features at any given point gets more market share and profit. That high-assurance delays to get it right the first time is an unforgivable sin in capitalist market.<p>- A follow-up here, identified by a founder of INFOSEC (Schell), is that businesses make more money on broken software. They get market share by not charging too much plus adding features. So, that means they need to find minimal amount of features to add at minimal labor cost. They keep customers with lock-in, which neglects quality automatically. Common to charge for updates and fixes delivered regularly in a way that&#x27;s good for financial reports. Schell reported that non-IT industry he met with was aware of the game early where they said IT industry knew about his and other methods for robust software, that they worked, and refused to apply them to continously charge for broken software. A true conspiracy that became the default as high-assurance was forgotten, everyone grew up with shit software, and everyone [wrongly] believes it&#x27;s inevitable rather than intentional.<p>- Demand is a huge problem. Most people blame software makers... which admittedly conspire... yet users will rarely buy secure stuff or even higher quality stuff. Any HN reader knows how consumers do economics and most businesses do IT. If they don&#x27;t give a shit, then the supply side shouldn&#x27;t per capitalism. They want insecure OS&#x27;s running with no safety checks in CPU supporting insecure peripherals&#x2F;apps and nearly-backdoored wireless standards? Well, you better provide it or you make no money. FOSS has similar problem for popularity or uptake. There&#x27;s a niche that does higher-security stuff, mostly in defense but not all. Yet, higher cost plus abysmally low volume = <i>very high</i> unit prices or OEM licenses. It&#x27;s like a trap. Worst, another conspiracy Schell&#x27;s industry people noticed early on was mainstream &quot;security&quot; vendors buy up high-assurance vendors, then eliminate or water down their offerings. Might be incidental or nefarious but it&#x27;s a real effect.<p>- Walker&#x27;s Computer Security Initiative, along with Schell&#x27;s work, countered all of this to invent INFOSEC field, create standards, incentivize them, improve mainstream, and bring high-assurance market up. Bell, of Bell-LaPadula, describes in a paper that NSA killed it by competing with them directly w&#x2F; government solutions and reneging on all promises of longevity &amp; pay. Post-Snowden, a dumb move or intentional sabotage? Still not sure but NSA is real obstacle. EAL6&#x2F;7 products still considered munitions for export although maybe not enforced. Government keeps steady development of high assurance (Type 1 especially) for use by military and defense contractors but bans us from using it. They&#x27;re steady obstacle, esp NSA and DOD but DARPA &amp; NSF a helpful neutrals.<p>- Worst one is ignorance and apathy. You&#x27;ll see me be harsh on security industry here for a reason: they don&#x27;t know any of this shit or even what high-assurance is mostly. It&#x27;s like CompSci, high-assurance, defense, mainstream INFOSEC, and common IT are all silo&#x27;d from each other with little knowledge going across. Tell INFOSEC or IT people about inexpensive methods for robust or secure software gets you ignored. They don&#x27;t apply almost anything outside code review and testing despite empirical evidence backing each method in high-assurance. Not sure of the solution there but this <i>really</i> hurts us that almost nobody does high assurance. Especially FOSS given its free labor.<p>So, there&#x27;s some of the obstacles to high-assurance security getting more adoption. Good news is there&#x27;s steadily companies appearing to do it and academics dumping their work into companies or FOSS releases. Stuff to build on. Occasionally it happens like with Chrome being a variant of OP Web Browser w&#x2F; lower security for faster speed, Blackberry using QNX (medium assurance) for Playbook, OKL4 on mobile phones, Paxos in the distributed systems, Bernstein&#x27;s NaCl getting more adoption, GenodeOS getting more desktop ready, and so on. Little outliers showing what&#x27;s possible. Not much else, though, due to strong obstacles in every community even when high-assurance is easy or fairly cost-effective. Human nature I guess...