OMG TECHNICAL MEETING SPECIAL EVENT

Introduction to Trusted Software Development Tutorial

Monday, September 20, 2010 - 1:00 pm - 3:30 pm

| Register | Hotel |

Dr. Ben A. Calloni, P.E., CISSP Lockheed Martin Fellow, Software Security OCRES Advanced Certified Professional Member OMG Board of Directors Co-chair OMG Systems Assurance Task Force

The ever expanding need for trusted software from longer and international supply chains affects all large commercial Enterprises as well as the Defense Industrial Base (DIB) contractors. Over the last decade, major integrators like Lockheed Martin have been moving to more open architectures while relying more heavily on open standards based Commercial-Off-the-Shelf (COTS) products to reduce initial cost and improve long term affordability and sustainability in its major system's development for delivery to its DoD and US Government customers. In an effort to insure such standards and its resulting products meet the needs of the DIB as well as commercial Enterprise, companies like Lockheed Martin actively participate in not-for-profit standards consortia, such as OMG and The Open Group and the American Institute of Aeronautics and Astronautics (AIAA).

An increasing number of those products are being utilized within the security boundary of the DIB contractor's internal and delivered systems. Many COTS products are developed to specifically provide Information Assurance (IA) functionality and in some cases even undergo the rigor of Common Criteria Evaluation. However, there are many COTS products that, while not providing specific IA support, will be included within the Trusted Computing boundary of a given system.

This tutorial will provide the attendees the opportunity to get a quick introduction to some of the rigor necessary by the DIB to produce Trusted Software internally. Such interaction will increase the likelihood of the COTS vendors feeding products into DoD and US Government supply chains to proactively pursue and adopt more software assurance rigor into their own software development processes. Obviously, to the degree that these vendors improve the quality of their products for the DIB, the Enterprise Market will benefit too, as well as the quality of the standards that come from the consortia.