Maybe software verification will bring the answer. A lot of research is being done in that field. We're starting to see implementations of small OS, compilers, cryptographic protocols etc... that have been proved correct against some specification/attacker model.