Skip to main content
U.S. flag

An official website of the United States government

Dot gov

The .gov means it’s official.
Federal government websites often end in .gov or .mil. Before sharing sensitive information, make sure you’re on a federal government site.


The site is secure.
The https:// ensures that you are connecting to the official website and that any information you provide is encrypted and transmitted securely.

Formal Methods for Statistical Software



Paul E. Black


"Statistical software" encompasses several distinct classes of software. This report explains what formal methods, tools, and approaches may be able to increase assurance of results of using statistical software and implementing differential privacy. To provide context, we present an exemplary process for assured results. The parts are, data assurance, algorithm design, software production, correctness proofs, post production assurance of software, and result checking. We note a workshop we organized to support this paper, and finish with recommended formal methods, tools, and researchers doing particularly pertinent work.
NIST Interagency/Internal Report (NISTIR) - 8274
Report Number


correctness proofs, formal methods, software assurance, differential privacy, software quality, static analysis, static source code analyzers, statistical software.
Created October 4, 2019