Product-focussed security assurance of ultra-large scale systems

拟议的研究计划的目的是提高我们行业的能力，以创建和评估产品为重点的软件安全保证。“以产品为中心”是指基于软件产品本身创建和评估的保证，而不是基于次要因素，例如，开发过程、开发人员或开发组织。目前在实践中使用的绝大多数安全保证都不是以产品为重点的。他们可能依赖供应商声称使用“最佳做法”。

The objective of the proposed research program is to increase our industry's ability to create and evaluate product-focussed security assurances about software. By "product-focussed" we mean assurances that are created and evaluated based on the software products themselves, rather than being based on secondary factors such as e.g., the development process, the developers or the developing organization. The vast majority of security assurances used in practice today are not product-focussed. They may rely on the vendor's claim of using "best-practices".