Miron Livny Director and CTO of the SWAMP Morgridge Institute for Research

1. Measure Early and Measure Often The continuous assurance framework of the SoftWare Assurance Market Place (SWAMP) Miron Livny Director and CTO of the SWAMP Morgridge Institute for Research

2. Developing effective SwMM tools… … requires continuous testing and evaluation • Access to a rich and diverse collection of software packages and SwMM tools • Access to automation tools capable of managing frequent execution of large ensembles of tests • Access to analytics capabilities

3. Effective usage of SwMM tools … … requires continuous and frequent SwMM runs throughout the development , procurement and deployment processes • Access to a diverse collection of SwMM tools • Access to automation capable of managing frequent execution of SwMM runs • Access to analytics capabilities

4. Effective training of SwMM techniques … … requires integration of hands-on SwMM exercises in the classroom and assignments • Access to an open diverse collection of SwMM tools • Access to means that enable management of users and projects and protect privacy

5. In other words … … the success of the SwMM effort requires the support of continuous assurance capabilities. • Automation that supports dependable access to a rich collection of SwA tools and software packages • Managed sharing of measurements and tools • Analytics capabilities • An active and as open as possible community

6. The Software Assurance Marketplace (SWAMP) Team Designing, building, operating and distributing the SWAMP is a joint effort of four research institutions: Morgridge Institute for Research (lead), Indiana University, University of Illinois Urbana-Champaign, and University of Wisconsin-Madison. Jim Basney, UIUC Miron Livny, MIR Bart Miller, UW Von Welch, IU Funded by DHS S&T

7. Two ways to use the SWAMP • An open facility with a powerful High Throughput Computing (HTC) backend • An “in the box” version that can be deployed locally and integrated to the local environment

8. COMPERHANSIVE Vision Our target customers are all the members of the Software Assurance (SwA) eco-system – tool developers, software developers, facility managers, researchers and educators. The community needs a continuous assurance facility and locally deployed capabilities that enable significant improvement in the quality of SwA tools and lead to a broader adoption of SwA tools and SwA methodologies. While protecting the confidentiality of your data and your privacy, the SWAMP facility can help you: • Identify new (possible) defects in your software every time you commit a change • Identify new (possible) defects in a software/library/module you are using every time a new version is released • Profile the ability of yourSwA tool to identify (possible) software defects every time you commit a change • Exposeyour tools and software to the SwA community http://continuousassurance.org/wp-content/uploads/2013/10/SWAMP-VISION-10.28.13.pdf

9. OPEN & EVOLVING FRAMEWORK To meet the diverse and ever-changing needs and expectations of the different groups that compose the software assurance eco-system, a framework that offers an environment with the following key elements is required: • New tools can be added easily and efficiently • New software packages can be added easily • Support for tools that integrate and interpret the output of software assurance tools • Access to software products and assessment results at all levels • Understanding the process of software assessment continuousassurance.org/wp-content/uploads/2013/11/White-Paper-Evolving-Framework.pdf

10. We are ready and eager to enable you to MEASURE early and to MEASURE often!

12. View the Results