Today's avionics systems depend more and more on software from many sources: vendors, subcontractors, in-house, and open source. System interactions are exposed to external agents in contexts from air-to-ground links to OS patches downloaded via the Internet. This is a huge amount of software with the risk of attack from distant global sites. Yet users need assurance that the software will work and not create security problems. We focus on NIST's Software Assurance Metrics And Tool Evaluation (SAMATE) project and its contribution. SAMATE is developing specifications, metrics, and automated test suites for software assurance tools. For instance, source code security analyzers can help developers produce software with fewer security flaws. They can also help identify malicious code and poor coding practices that lead to vulnerabilities. The project's publicly available reference dataset, the SRD, contains more than 1800 flawed (and fixed.) program examples to help evaluate software assurance tools and algorithms. These metrics and reference datasets help purchasers confirm tool vendors' claims. We also study the assurance impact of tool use, methods, and techniques.


    Zugriff

    Zugriff über TIB

    Verfügbarkeit in meiner Bibliothek prüfen

    Bestellung bei Subito €


    Exportieren, teilen und zitieren



    Titel :

    Software assurance with SAMATE reference dataset, tool standards, and studies


    Beteiligte:
    Black, P.E. (Autor:in)


    Erscheinungsdatum :

    2007


    Format / Umfang :

    6 Seiten, 10 Quellen



    Medientyp :

    Aufsatz (Konferenz)


    Format :

    Print


    Sprache :

    Englisch





    C Code Inspection Tool for Software Quality Assurance

    Fernandez, E. / Gonzalez, P. / Eurospace | British Library Conference Proceedings | 1998


    C Code Inspection Tool for Software Quality Assurance

    Fernandez, E. / Gonzalez, P. | British Library Online Contents | 1998


    CASE Tool and Standard Support for Software Product Assurance

    Vollman, T. / Garbajossa Sopea, J. | British Library Online Contents | 1996


    Space product assurance - software product assurance

    European Cooperation for Space Standardization | SLUB | 1996