title: Software Assurance Using Structured Assurance Case Models.
abstract: Software assurance is an important part of the software development process to reduce risks and ensure that the software is dependable and trustworthy. Software defects and weaknesses can often lead to software errors and failures and to exploitation by malicious users. Testing, certification and accreditation have been traditionally used in the software assurance process to attempt to improve software trustworthiness. In this paper, we examine a methodology known as a structured assurance model, which has been widely used for assuring system safety, for its potential application to software assurance. We describe the structured assurance model and examine its application and use for software assurance. We identify strengths and weaknesses of this approach and suggest areas for further investigation and testing.
authors.affiliation: Software and Systems Division, Information Technology Laboratory, National Institute of Standards and Technology, Gaithersburg, MD 20899-8970.
authors.forename: Thomas
authors.initials: T
authors.lastname: Rhodes
authors.affiliation: Software and Systems Division, Information Technology Laboratory, National Institute of Standards and Technology, Gaithersburg, MD 20899-8970.
authors.forename: Frederick
authors.initials: F
authors.lastname: Boland
authors.affiliation: Software and Systems Division, Information Technology Laboratory, National Institute of Standards and Technology, Gaithersburg, MD 20899-8970.
authors.forename: Elizabeth
authors.initials: E
authors.lastname: Fong
authors.affiliation: Software and Systems Division, Information Technology Laboratory, National Institute of Standards and Technology, Gaithersburg, MD 20899-8970.
authors.forename: Michael
authors.initials: M
authors.lastname: Kass
keywords: product assurance; software assurance; software assurance case; software security; structured assurance case model; structured software assurance model