NVIDIA's Security Shift: Formal Verification with SPARK

Facing increasing cybersecurity threats, NVIDIA's security team moved away from traditional testing and embraced SPARK formal verification. A proof-of-concept project successfully converted security-sensitive C code to SPARK in just three months, demonstrating improved security without performance loss. Now, over fifty NVIDIA developers are trained in SPARK, with numerous products shipping SPARK components. This case study highlights the successful adoption of formal verification, offering valuable lessons for other organizations seeking enhanced security.