Build Security In - Build Security In (BSI) is a collaborative effort that provides practices, tools, guidelines, rules, principles, and other resources that software developers, architects, and security practitioners can use to build security into software in every phase of its development. BSI content is based on the principle that software security is fundamentally a software engineering problem and must be addressed in a systematic way throughout the software development life cycle.
SAMATE - Software Assurance Metrics and Tool Evaluation - The NIST SAMATE (Software Assurance Metrics And Tool Evaluation) project is dedicated to improving software assurance by developing methods to enable software tool evaluations, measuring the effectiveness of tools and techniques, and identifying gaps in tools and methods. This project supports the Department of Homeland Security's Software Assurance Tools and R&D Requirements Identification Program - in particular, Part 3, Technology (Tools and Requirements), the identification, enhancement and development of software assurance tools. The scope of the SAMATE project is broad: ranging from operating systems to firewalls, SCADA to web applications, source code security analyzers to correct-by-construction methods.
Software Assurance Community Resources and Information Clearinghouse - This clearinghouse, supported under the Department of Homeland Security's Software Assurance Program, provides web-based access to a repository of information on software assurance. The Software Assurance Forum and several working groups, composed of stakeholders in government, industry, and academia, are contributing to efforts focused on advancing software assurance objectives and make their work available from this clearinghouse.
It addresses: workforce education and training; processes and practices; technology, tools and product evaluations;acquisition and outsourcing; measurement; business case; malware atribution.
Wikipedia Page on Software Assurance - This page defines terms and acronyms associated with Software Assurance (SwA)as well at the term itself and also lists various organizations involved in SwA initiatives.
DACS Gold Practice Initiative
