The Software Assurance Marketplace: A response to a challenging problem

by Kevin Greene - Software Assurance Program Manager Department of Homeland Security Science and Technology Directorate - Monday, 20 October 2014.
 
With the steady proliferation of wearable devices and the emergence of the Internet of Things, everyone and everything will eventually be connected by some piece of software. The growing reliance on software makes us all vulnerable and susceptible to cyber attacks.

The more alarming factor in this web of connectivity is that the quality of software is steadily declining. For example, the most recent cybersecurity incidents exposed some serious vulnerabilities in commodity and open-source software products such as Adobe’s product line, Bash, OpenSSL, Microsoft Internet Explorer, Google Chrome and Oracle’s Java. These vulnerabilities continue to exist, in part because of the limited capabilities of software quality assurance tools in detecting weaknesses that are exploitable.
 
Full Article