DID YOU KNOW? DTIC has over 3.5 million final reports on DoD funded research, development, test, and evaluation activities available to our registered users. Click
HERE to register or log in.
Accession Number:
AD1084506
Title:
Exploring the Use of Metrics for Software Assurance
Report Date:
2018-12-01
Abstract:
The Software Assurance Framework (SAF) is a collection of cybersecurity practices that programs can apply across the acquisition lifecycle and supply chain. The SAF can be used to assess an acquisition programs current cybersecurity practices and chart a course for improvement, ultimately reducing the cybersecurity risk of deployed software-reliant systems. This report proposes measurements for each SAF practice that a program can select to monitor and manage the progress its making toward software assurance. Metrics are needed to determine how effectively a practice is performed and how well software assurance is addressed. This report presents an approach for determining which SAF practices should be measured and how. It provides acquirers, program managers, and contractors with an approach for using metrics to establish confidence that the systems they plan to field will have sufficient software assurance.
Document Type:
Conference:
Journal:
Pages:
69
File Size:
1.54MB
FA8702-15-D-0002
(FA870215D0002);
Contracts:
Grants:
Distribution Statement:
Approved For Public Release
