Product-focussed security assurance of ultra-large scale systems

点击翻译按钮获取中文摘要

The objective of the proposed research program is to increase our industry's ability to create and evaluate product-focussed security assurances about software. By "product-focussed" we mean assurances that are created and evaluated based on the software products themselves, rather than being based on secondary factors such as e.g., the development process, the developers or the developing organization. The vast majority of security assurances used in practice today are not product-focussed. They may rely on the vendor's claim of using "best-practices".