Software assurance using structured assurance case models

Journal of Research of the National Institute of Standards and Technology

Volumn 115, Issue 3, 2010, Pages 209-216

  Rhodes, Thomas ^a   Boland, Frederick ^a   Fong, Elizabeth ^a   Kass, Michael ^a  

^a NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY   (United States)

Author keywords

Product assurance; Software assurance; Software assurance case; Software security; Structured assurance case model; Structured software assurance model

Indexed keywords

NETWORK SECURITY; SOFTWARE DESIGN; SOFTWARE ENGINEERING; SOFTWARE TESTING;

ASSURANCE CASE; ITS APPLICATIONS; PRODUCT ASSURANCE; SOFTWARE ASSURANCE; SOFTWARE DEFECTS; SOFTWARE DEVELOPMENT PROCESS; SOFTWARE SECURITY; SOFTWARE TRUSTWORTHINESS;

APPLICATION PROGRAMS;

EID: 77952076962     PISSN: 1044677X     EISSN: None     Source Type: Journal    
DOI: 10.6028/jres.115.013     Document Type: Article

References (17)

1. Jackson, Daniel, Martyn Thomas, and Lynette I. Millett (Editors), Software for Dependable Systems: Sufficient Evidence? Committee on Certifiably Dependable Software Systems, Computer Science and Telecommunications Board, National Research Council, National Academies Press, ISBN: 0-309-66738-0, (available at http://www.nap.edu/cata-log/11923.html)
2. Tim P. Kelly, "Arguing Safety-A Systematic Approach to Safety Case Management, " DPhil Thesis, York University, Department of Computer Science Report YCST, May 1999.
3. S. Lautiere, D., Cooper, and D. Jackson, SafSec: Commonalities Between Safety and Security Assurance, Proceedings of the 13th Critical Systems Symposium, Southampton, England, February 2005 (available at http://www.praxis-his.com/publications/documents/SafeSecpdf).
4. S. Lautiere, D. Cooper, D. Jackson, and T. Cockram, Assurance Cases: how assured are you? supplemental volume to DSN-2004, Proceedings of the 2004 International Conference on Dependable Systems and Networks 2004, (available at http://www.praxis-his.com/publications/documents/AssuranceCase DSNO4pdf).
5. Robert J. Ellison, John Goodenough, Charles Weinstock, and Carol Woody, Survivability Assurance for System of Systems, Software Engineering Institute Technical Report CMU/SEI-2008-TR-008, May 2008.
6. John Goodenough, Howard Lipson, and Chuck Weinstock, Arguing Security-Creating Security Assurance Cases, (available at https:// buildsecurityin. us-cert.gov/daisy/bsi/arti-cles/knowledge/assurance/643-BSI. html
7. Howard Lipson, and Chuck Weinstock, Evidence of Assurance: Laying the Foundation for a Credible Security Case, (available at http://buildsecurityin. us-cert.gov/dairy/bsi/articles/knowl-edges/assurance/973-BSI.html).
8. Wikipedia Reference http://en. wikipedia.org/wiki/Software Assurance
9. IEEE Standard Glossary of Software Engineering Terminology IEEE 610.12.
10. SAMATE project, http://samate.nist.gov/.
11. Department of Homeland Security Software Assurance Program, http://buildsecurityin. us-cert.gov/swa/index.html
12. Committee on National Security Systems 4009 National Information Assurance Glossary, (available at http://www.cnss.gov/Assets/pdf/cnssi 4009pdf)
13. T. Scott Ankrum and Alfred H. Krombolz. Structured Assurance Cases: Three Common Standards, Slides presentation at the Association for Software Quality (ASQ) Section 509 meeting, the MITRE Corporation, 25, January 2006 (available at http://www.asg509.org/ht/a/GetDocumentAction/i/2132).
14. Software Assurance Evidence Metamodel (SAEM) Draft Specification, Initial submission to SAEM RFP (swa/07-09-03) OMG document: swa/08-02-01, Software Assurance ABSIG (available at http://swa.omg.org/).
15. Samuel, T. Redwine, Jr., Revision of ISO/IEC 15026, presentation slides at OMG SIG meeting, March 11, 2008.
16. T. P. Kelly and R. A. Weaver, The Goal Structuring Notation-A Safety Argument Notation, Proceedings of Dependable Systems and Networks 2004, Workshop on Assurance Cases, July 2004.
17. Emmet, Luke, Using Claims, Arguments and Evidence: A Pragmatic View-and tool support in ASCE, www.adelard.com.