Notice of Workshop To Participate in the Development of Software Assurance Metrics, 46147 [05-15724]

Download as PDF Federal Register / Vol. 70, No. 152 / Tuesday, August 9, 2005 / Notices Dated: August 1, 2005. Joseph A. Spetrini, Acting Assistant Secretary for Import Administration. [FR Doc. E5–4306 Filed 8–8–05; 8:45 am] (Billing Code: 3510–DS–S) DEPARTMENT OF COMMERCE National Institute of Standards and Technology Notice of Workshop To Participate in the Development of Software Assurance Metrics National Institute of Standards and Technology, Commerce. ACTION: Notice of workshop. AGENCY: SUMMARY: The National Institute of Standards and Technology (NIST) announces the first in a series of planned workshops being held in support of NIST’s Software Assurance Metrics and Tool Evaluation (SAMATE) project. NIST is working with industry, academia, and users: • To identify deficiencies in software assurance (SA) methods and tools • To develop metrics for the effectiveness of SA tools. NIST invites parties interested in these issues to contribute to the specification of such metrics and to the development of reference data sets capable of testing the effectiveness of SA tools. These reference data sets, when used during an SA tool’s development, can aid in building a correct implementation with regard to these metrics. The first workshop ‘‘Defining the State of the Art in Software Security Tools’’ is being held at NIST Gaithersburg August 10 and 11. Future Workshops will be announced on the Project’s Web site https:// samate.nist.gov/ and on other SA forums. DATES: The first workshop is being held at NIST Gaithersburg August 10, 9 a.m. to 5 p.m. and August 11, 2005, 9 a.m. to 1 p.m. FOR FURTHER INFORMATION CONTACT: For further information, you may visit the Software Assurance Metrics Project Website at https://samate.nist.gov/. In addition, you may telephone Dr. Paul E. Black at (301) 975–4794, or by e-mail at: paul.black@nist.gov. SUPPLEMENTARY INFORMATION: In support of its Software Assurance Metrics and Tool Evaluation (SAMATE) project, NIST is working with industry, academia, and users: • To identify deficiencies in software assurance (SA) methods and tools VerDate jul<14>2003 15:52 Aug 08, 2005 Jkt 205001 • To develop metrics for the effectiveness of SA tools. The SA Metrics Project surveys current SA tools and develops a classification scheme, grouping SA tools with similar functionality or capability. A set of metrics and tests are developed for each tool class. Source/object code vulnerability scanners are an example of one possible class. A series of Workshops will be used to: • Validate the tool classes. • Establish priorities for the order in which SA tool classes are tested. • Help determine the required and optional functionality for each class of SA tools. After a tool class is selected, requirements, metrics, and tests for these functionalities are developed. Classification and testing activities can proceed simultaneously. As a result, a draft specification and test methodology for the highest priority tool class is developed. Further information on the project, including the Project Plan, may be found at the Project’s Web site https://samate.nist.gov/ and on other SA forums. Dated: August 3, 2005. Matthew Heyman, Chief of Staff. [FR Doc. 05–15724 Filed 8–8–05; 8:45 am] BILLING CODE 3510–13–P CORPORATION FOR NATIONAL AND COMMUNITY SERVICE Information Collection; Submission for OMB Emergency Review, Comment Request Corporation for National and Community Service. ACTION: Notice. AGENCY: SUMMARY: The Corporation for National and Community Service (hereinafter the ‘‘Corporation’’), has submitted a public information collection request (ICR) entitled AmeriCorps Application Instructions: State Competitive, State Education Award, National Direct, National Direct Education Award, National Professional Corps, Indian Tribes, States and Territories without Commissions, and National Planning, to the Office of Management and Budget (OMB) for review and approval in accordance with the Paperwork Reduction Act of 1995, Pub. L. 104–13, (44 U.S.C. Chapter 35). A copy of this ICR, with applicable supporting documentation, may be obtained by contacting the Corporation for National and Community Service, AmeriCorps, Amy Borgstrom, Associate Director of PO 00000 Frm 00016 Fmt 4703 Sfmt 4703 46147 Policy, (202) 606–6930, or by e-mail at ABorgstrom@cns.gov. Individuals who use a telecommunications device for the deaf (TTY–TDD) may call (202) 565– 2799 between 8:30 a.m. and 5 p.m. eastern time, Monday through Friday. ADDRESSES: Comments may be submitted, identified by the title of the information collection activity, to (1) Corporation for National and Community Service, and (2) the Office of Information and Regulatory Affairs. Please send comments to: 1. Corporation for National and Community Service, Attn: Amy Borgstrom, Associate Director of Policy for AmeriCorps, by any of the following two methods within 30 days from the date of publication in this Federal Register: (a) By fax to: (202) 606–3476, Attention: Amy Borgstrom, Associate Director of Policy for AmeriCorps; and (b) Electronically by e-mail to: ABorgstrom@cns.gov; and 2. Office of Information and Regulatory Affairs, Attn: Ms. Katherine Astrich, OMB Desk Officer for the Corporation for National and Community Service, by any of the following two methods within 30 days from the date of publication in this Federal Register: (a) By fax to: (202) 395–6974, Attention: Ms. Katherine Astrich, OMB Desk Officer for the Corporation for National and Community Service; and (b) Electronically by e-mail to: Katherine_T._Astrich@omb.eop.gov. SUPPLEMENTARY INFORMATION: The OMB is particularly interested in comments which: • Evaluate whether the proposed collection of information is necessary for the proper performance of the functions of the Corporation, including whether the information will have practical utility; • Evaluate the accuracy of the agency’s estimate of the burden of the proposed collection of information, including the validity of the methodology and assumptions used; • Propose ways to enhance the quality, utility, and clarity of the information to be collected; and • Propose ways to minimize the burden of the collection of information on those who are to respond, including through the use of appropriate automated, electronic, mechanical, or other technological collection techniques or other forms of information technology, e.g., permitting electronic submissions of responses. Comments Description: Since the President’s Call to Service, many Americans have E:\FR\FM\09AUN1.SGM 09AUN1

Agencies

[Federal Register Volume 70, Number 152 (Tuesday, August 9, 2005)]
[Notices]
[Page 46147]
From the Federal Register Online via the Government Printing Office [www.gpo.gov]
[FR Doc No: 05-15724]


-----------------------------------------------------------------------

DEPARTMENT OF COMMERCE

National Institute of Standards and Technology


Notice of Workshop To Participate in the Development of Software 
Assurance Metrics

AGENCY: National Institute of Standards and Technology, Commerce.

ACTION: Notice of workshop.

-----------------------------------------------------------------------

SUMMARY: The National Institute of Standards and Technology (NIST) 
announces the first in a series of planned workshops being held in 
support of NIST's Software Assurance Metrics and Tool Evaluation 
(SAMATE) project. NIST is working with industry, academia, and users:
     To identify deficiencies in software assurance (SA) 
methods and tools
     To develop metrics for the effectiveness of SA tools.
    NIST invites parties interested in these issues to contribute to 
the specification of such metrics and to the development of reference 
data sets capable of testing the effectiveness of SA tools. These 
reference data sets, when used during an SA tool's development, can aid 
in building a correct implementation with regard to these metrics.
    The first workshop ``Defining the State of the Art in Software 
Security Tools'' is being held at NIST Gaithersburg August 10 and 11. 
Future Workshops will be announced on the Project's Web site https://
samate.nist.gov/ and on other SA forums.

DATES: The first workshop is being held at NIST Gaithersburg August 10, 
9 a.m. to 5 p.m. and August 11, 2005, 9 a.m. to 1 p.m.

FOR FURTHER INFORMATION CONTACT: For further information, you may visit 
the Software Assurance Metrics Project Website at https://
samate.nist.gov/. In addition, you may telephone Dr. Paul E. Black at 
(301) 975-4794, or by e-mail at: paul.black@nist.gov.

SUPPLEMENTARY INFORMATION: In support of its Software Assurance Metrics 
and Tool Evaluation (SAMATE) project, NIST is working with industry, 
academia, and users:
     To identify deficiencies in software assurance (SA) 
methods and tools
     To develop metrics for the effectiveness of SA tools.
    The SA Metrics Project surveys current SA tools and develops a 
classification scheme, grouping SA tools with similar functionality or 
capability. A set of metrics and tests are developed for each tool 
class. Source/object code vulnerability scanners are an example of one 
possible class. A series of Workshops will be used to:
     Validate the tool classes.
     Establish priorities for the order in which SA tool 
classes are tested.
     Help determine the required and optional functionality for 
each class of SA tools.
    After a tool class is selected, requirements, metrics, and tests 
for these functionalities are developed. Classification and testing 
activities can proceed simultaneously. As a result, a draft 
specification and test methodology for the highest priority tool class 
is developed. Further information on the project, including the Project 
Plan, may be found at the Project's Web site https://samate.nist.gov/ and on other SA forums.

    Dated: August 3, 2005.
Matthew Heyman,
Chief of Staff.
[FR Doc. 05-15724 Filed 8-8-05; 8:45 am]
BILLING CODE 3510-13-P
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.