Proceedings of Workshop on Software Security Assurance Tools, Techniques, and Metrics

Published

February 1, 2006

Author(s)

Paul E. Black, Michael J. Kass, Elizabeth N. Fong

Abstract

This is the proceedings of a workshop held on November 7 and 8, 2005 in Long Beach, California, USA, hosted by the Software Diagnostics and Conformance Testing Division, Information Technology Laboratory, of the National Institute of Standards and Technology. The workshop, ?Software Security Assurance Tools, Techniques, and Metrics,? is one of a series in the NIST Software Assurance Measurement and Tool Evaluation (SAMATE) project, which is partially funded by DHS to help identify and enhance software security assurance (SSA) tools. The goal of this workshop is to discuss and refine the taxonomy of flaws and the taxonomy of functions, come to a consensus on which SSA functions should first have specifications and standards tests developed, gather SSA tools suppliers for ?target practice? on reference datasets of code, and identify gaps or research needs in SSA functions.

Citation

Special Publication (NIST SP) - 500-265

Report Number

500-265

NIST Pub Series

Special Publication (NIST SP)

Pub Type

NIST Pubs

Download Paper

https://doi.org/10.6028/NIST.SP.500-265

Local Download

Keywords

Software assessment tools, software assurance, software metrics, software security, target practice, reference dataset, vulnerability

Citation

Black, P. , Kass, M. and Fong, E. (2006), Proceedings of Workshop on Software Security Assurance Tools, Techniques, and Metrics, Special Publication (NIST SP), National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.SP.500-265, https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=150606 (Accessed April 25, 2024)