Software Security Assurance: A State-of-Art Report (SAR)

reportActive / Technical Report | Accession Number: ADA472363 | Open PDF

Abstract:

This Information Assurance Technology Analysis Center IATAC State-of-the-Art SOAR describes the current state-of-the-art in software security assurance. It provides an overview of the current state of the environment in which defense and national security software must operate then surveys current and emerging activities and organizations involved in promoting various aspects of software security assurance. The SDAR also describes the variety of techniques and technologies in use in government, industry, and academia for specifying, acquiring, producing, assessing, and deploying software that can, with a justifiable degree of confidence, be said to be secure. Finally, the SOAR presents observations about noteworthy trends in software security assurance as a discipline.

Author(s):
Goertzel, Karen M. ; Winograd, Theodore ; Mckinley, Holly L. ; Oh, Lyndon J. ; Colon, Michael ; Mcgibbon, Thomas ; Fedchak, Elaine ; Vienneau, Robert
Author Organization(s):
INFORMATION ASSURANCE TECHNOLOGY ANALYSIS CENTER (IATAC) HERNDON VA
Descriptive Note:
State-of-the-Art rept.
Supplementary Note:
The original document contains color images. DOI: 10.21236/ADA472363
Pagination:
0396

Security Markings

DOCUMENT & CONTEXTUAL SUMMARY

Distribution:
Approved For Public Release
Distribution Statement:
Approved For Public Release; Distribution Is Unlimited.

RECORD

Collection: TR
Identifying Numbers
Contract/Grant Number(s):
SPO700-98-D-4002
Monitor Series:
DTIC*
 Subject Terms
Joint Capability Areas:
JCA_5_Command and Control; JCA_5.3_Planning; JCA_5.3.2_Apply Situational Understanding; JCA_4.6_Engineering; JCA_5.6_Monitor; JCA_2.1_Planning and Direction; JCA_2.1.1_Define and Prioritize Requirements; JCA_5.2_Understand; JCA_4.6.1_General Engineering; JCA_5.5_Direct; JCA_5.2.3_Share Knowledge and Situational Awareness; JCA_5.3.3_Develop Strategy; JCA_5.3.4_Develop Courses of Action; JCA_5.3.5_Analyze Courses of Action; JCA_4.2_Supply; JCA_4.2.1_Manage Supplies and Equipment; JCA_5.4_Decide; JCA_5.5.1_Communicate Intent and Guidance; JCA_1.2.3_Educating; JCA_4.7.2_Installation Services; JCA_4.7_Base and Installations Support
Modernization Areas:
Cyber; Microelectronics; Fully Networked C3
Communities of Interest:
Cyber
Descriptor(s):
*SOFTWARE ENGINEERING, *DATA PROCESSING SECURITY, COMPUTER PROGRAMS, CONFIDENCE LEVEL, INFORMATION ASSURANCE, STATE OF THE ART, NATIONAL SECURITY
Field(s)/Group(s):
Computer Programming and Software, Computer Systems Management and Standards
Report Date:
2007 Jul 31
Creation Date:
2007 Oct 10