Software Security Assurance

This State-of-the-Art Report (SOAR) describes the current state of software security assurance. It provides an overview of the current state of the environment in which defense and national security software must operate and then surveys current and emerging activities and organizations involved in promoting various aspects of software security assurance. This SOAR also describes the variety of techniques and technologies in use in government, industry, and academia for specifying, acquiring, producing, assessing, and deploying software that can, with a justifiable degree of confidence, be said to be secure. Finally, this SOAR presents observations about noteworthy trends in software security assurance as a discipline.