Software Engineering Institute | Carnegie Mellon University
Software Engineering Institute | Carnegie Mellon University

Digital Library

Javascript is currently disabled for your browser. For an optimal search experience, please enable javascript.

Advanced Search

Basic Search

Content Type

Topics

Publication Date

Technical Note

Prototype Software Assurance Framework (SAF): Introduction and Overview

  • April 2017
  • By Christopher J. Alberts, Carol Woody, PhD
  • In this report, the authors discuss the Software Assurance Framework (SAF), a collection of cybersecurity practices that programs can apply across the acquisition lifecycle and supply chain.
  • Cybersecurity Engineering
  • Publisher: Software Engineering Institute
    CMU/SEI Report Number: CMU/SEI-2017-TN-001
  • Abstract

    Software is a growing component of modern business- and mission-critical systems. As organizations become more dependent on software, security-related risks to their organizational missions also increase. Traditional security-engineering approaches rely on addressing security risks during the operation and maintenance of software-reliant systems. The costs required to control security risks increase significantly when organizations wait until systems are deployed to address those risks. Field experiences of technical staff at the Software Engineering Institute (SEI) indicate that few programs currently implement effective cybersecurity practices early in the acquisition lifecycle. Recent DoD directives are beginning to shift programs’ priorities regarding cybersecurity. As a result, researchers from the CERT Division of the SEI have started cataloging the cybersecurity practices needed to acquire, engineer, and field software-reliant systems that are acceptably secure.

    This report introduces the prototype Software Assurance Framework (SAF), a collection of cybersecurity practices that programs can apply across the acquisition lifecycle and supply chain. The SAF can be used to assess an acquisition program’s current cybersecurity practices and chart a course for improvement, ultimately reducing the cybersecurity risk of deployed software-reliant systems. This report presents Version 0.2 of the SAF and features three pilot applications of it.

  • Download

Cite This Report

SEI

Alberts, Christopher; & Woody, Carol. Prototype Software Assurance Framework (SAF): Introduction and Overview. CMU/SEI-2017-TN-001. Software Engineering Institute, Carnegie Mellon University. 2017. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=496134

IEEE

Alberts. Christopher, and Woody. Carol, "Prototype Software Assurance Framework (SAF): Introduction and Overview," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Note CMU/SEI-2017-TN-001, 2017. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=496134

APA

Alberts, Christopher., & Woody, Carol. (2017). Prototype Software Assurance Framework (SAF): Introduction and Overview (CMU/SEI-2017-TN-001). Retrieved October 22, 2017, from the Software Engineering Institute, Carnegie Mellon University website: http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=496134

CHI

Christopher Alberts, & Carol Woody. Prototype Software Assurance Framework (SAF): Introduction and Overview (CMU/SEI-2017-TN-001). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2017. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=496134

MLA

Alberts, Christopher., & Woody, Carol. 2017. Prototype Software Assurance Framework (SAF): Introduction and Overview (Technical Report CMU/SEI-2017-TN-001). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=496134

BibTex

@techreport{AlbertsPrototypeSoftware2017,
title={Prototype Software Assurance Framework (SAF): Introduction and Overview},
author={Christopher Alberts and Carol Woody},
year={2017},
number={CMU/SEI-2017-TN-001},
institution={Software Engineering Institute, Carnegie Mellon University},
address={Pittsburgh, PA},
url={http://resources.sei.cmu.edu/library/asset-view.cfm?AssetID=496134} }