OMG’s First Software Assurance Workshop: Working Together for Confidence Fairfax, VA USA – March 5-7, 2007 [ Program ] [ Keynote ] [ Tutorials ] Presentations Manufacturing Software Interoperability and Assurance using Standardized Capability Profiling: An ISO 16100 Proposal | Michiko Matsuda, Professor, Kanagawa Institute of Technology - Qian Wang, Professor, Southeast University - Em delaHostria, Manager, Rockwell Automation - Eiji Arai, Professor, Osaka University |  | PDF |
| Building High-Assurance Systems out of Software Components of Lesser Assurance Using Middleware Security Gateways | | Sebastian Staamann, Director for Security Products and Solutions, PrismTech |  | PDF |
| | Towards a Meta-model for Dependability Cases | | George Despotou, D. Kolovos, R. Paige, F. Polack and T. Kelly, University of York |  | PDF |
| Certifying Applications for Known Security Weaknesses: The Common Weakness Enumeration (CWE) Effort | | Robert A. Martin, Principal Engineer, MITRE Corporation |  | PDF |
| | SOA ,Technical Risks, and Emerging Standards | | Victor L. Harrison, Partner, Federal Consulting Practice, Computer Sciences Corporation |  | PDF |
| | Software Assurance Ecosystem | | Djenana Campara, Chief Executive Officer, KDM Analytics |  | PDF |
| | Creating a Baseline Functional Specification for Source Code Analysis Tools | | Michael Kass, Computer Scientist, National Institute of Standards and Technology |  | PDF |
| | Software Reviews at Ericsson | | Dominique Toupin, Software Quality Assurance Manager, Ericsson |  | PDF |
| | High Fidelity Static Analysis for Secure Enterprise Software Requires Platform Knowledge | | Nikolai Mansourov, CTO, KDM Analytics |  | PDF |
| Opportunities and Obstacles to Using Static Analysis for the Development of Safety-Critical Software | | Redge Bartholomew, Engineering Manager, Rockwell Collins |  | PDF |
| | Gaps in Static Analysis Tools Coverage | Pedro Vales, Principal Software Engineer, James Butler, Manager, Knowledge Solutions, David Rager, Sr. Software Engineer, Charles Stack, Principal Software Engineer and Christopher Telfer, Ph.D., Principal Software Engineer, Concurrent Technologies Corporation |  | PDF |
| | Automatic Model-driven Security Policy Generation for High Assurance Systems | Ulrich Lang, CEO & Rudolf Schreiner, CTO, ObjectSecurity - Ramesh Bharadwaj, High Assurance Center, US Naval Research Laboratory, Tom Ritter, Fraunhofer Institute FOKUS |  | PDF |
| | Fault Tree Analysis of UML Designs | | Christopher Harper, Director, Avian Technologies Ltd. & Alan Parkinson, AGP Micro Ltd. |  | PDF |
| | Harmonizing System Development and Test Development with MDA | | Zhen Ru Dai, Fraunhofer FOKUS |  | PDF |
| | So You Have to Verify Software? A Quick Look at What You Should Expect | | Frédéric Michaud & Frédéric Painchaud, Defence Research and Development Canada – Valcartier |  | PDF |
| | Using the Principle of Least Authorization to Improve Software Assurance | | David Chizmadia, Sr. Security Assurance Analyst, Promia |  | PDF |
| | Full Cycle Real Time Information Assurance | | Sumeet Malhotra, Global Director Of Advanced Research, UNISYS |  | PDF |
| [ top ] Tutorials | Introduction to Software Security and Assurance Cases | | Samuel T. Redwine, Jr., Associate Professor, James Madison University |  | PDF PDF |
| | Security in the Software Life Cycle | | Karen Mercedes Goertzel & Theodore Winograd, Booz Allen Hamilton |  | PDF |
| | Software Safety Case Management | | Tim Kelly, High Integrity Systems Engineering Group, Dept. of Computer Science, University of York |  | PDF |
| | An Introduction to Attack Patterns as a SwA Knowledge Resource | | Sean Barnum, Principal Consultant, Cigital |  | PDF |
| | MILS: Architecture Enabling High Assurance | | Gordon Uchenick, Objective Interface Systems & W. Mark Vanfleet, National Security Agency |  | PDF |
| Last updated on 12/16/2013 |