Main Page
From SAMATE
SAMATE - Software Assurance Metrics And Tool Evaluation
Welcome to the NIST SAMATE* project. This is sponsored by the U.S. Department of Homeland Security (DHS) National Cyber Security Division and NIST.
This project supports the DHS Software Assurance (http://www.us-cert.gov/swa/) Tools and R&D Requirements Identification Program. The objective of part 3, Technology (Tools and Requirements) is the identification, enhancement and development of software assurance tools. NIST is leading in (A) testing software evaluation tools, (B) measuring the effectiveness of tools, and (C) identifying gaps in tools and methods.
For us, Software Assurance (SA) is
- ... the planned and systematic set of activities that ensures that software processes and products conform to requirements, standards, and procedures
- from NASA Software Assurance Guidebook and Standard (http://satc.gsfc.nasa.gov/assure/assurepage.html) (see quality assurance (1) in IEEE 610.12)
to help achieve
- Trustworthiness - No exploitable vulnerabilities exist, either of malicious or unintentional origin
- Predictable Execution - Justifiable confidence that software, when executed, functions as intended
SAMATE Links
- Static Analysis Tools Exposition at Static Analysis Workshop, June 2008
- Static Analysis Summit II, November 2007
- Source Code Security Analysis specifications, background, etc.
- Web Application Scanner specifications, background, etc.
- The SAMATE Reference Dataset (SRD) (http://samate.nist.gov/SRD) and its manual (http://samate.nist.gov/index.php/SRD).
- SA Tool Taxonomy
- Possible Conferences and Workshops and SAMATE Publications
- Technical Advisory Panel
Join the SAMATE mailing list!
If you wish to participate in the online discussion of SAMATE, including the reference dataset, specifications, taxonomies of tools, metrics, etc., please email michael.kass@nist.gov (mailto:michael.kass@nist.gov). If you are already a member, the mailing list web site is http://groups.yahoo.com/group/samate/
Short URL for this site is http://samate.nist.gov/
We pronounce SAMATE suh-mate, which rhymes with date.
This web site was created July 2005.
