 |
|
|
|||||||||||||
 |
|
||||||||||||||
 |
|||||
SAFECode NEWS and EVENTS > |
|
||||
See SAFECode present at these upcoming events:
8th SEMI-ANNUAL SOFTWARE ASSURANCE FORUM |
|||||
Media Contact
Stacy Simpson |
|||||
SAFECode In The News
SC Magazine UK Edition
Government Computer News
vnunet.com
SearchSecurity.com
Dark Reading
eWEEK.com
Computerworld (UK)
FederalNewsRadio -- Daily Debrief with Amy Morris
Silicon.com (UK) |
|||||
Press Release -- SAFECode Adds Nokia -- Download Press Release as pdf
Media Contact: FOR IMMEDIATE RELEASE SAFECode Adds Nokia as Newest Member Global leader in mobile technology joins industry-led effort to advance software assurance Arlington, Va. - March 31, 2008 - The Software Assurance Forum for Excellence in Code (SAFECode), a non-profit organization exclusively dedicated to increasing trust in information and communications technology products and services through the advancement of effective software assurance methods, today announced that it has added Nokia as its newest member. Founded by EMC Corporation, Juniper Networks, Inc., Microsoft Corp., SAP AG and Symantec Corp., SAFECode is the first global, industry-led effort to identify and promote best practices for developing and delivering more secure and reliable software, hardware and services. "As the global leader in mobile technology, Nokia brings invaluable expertise to SAFECode's efforts," said Paul Kurtz, executive director of SAFECode. "Software underpins the communications and mobile computing infrastructures we've come to rely on in so many ways. SAFECode is thrilled to have the opportunity to work with Nokia to build on the positive work the company has already done to promote assurance best practices across the mobile technology ecosystem." As a SAFECode member, Nokia will join with subject matter experts to identify and share proven vendor software assurance practices, promote broader adoption of such practices into the cyber ecosystem, and work with governments and critical infrastructure providers to leverage vendor practices to manage enterprise risks. "The continuous development of secure technology has always been core to Nokia's commitment to its customers. Participation in SAFECode offers a valuable opportunity to extend our corporate dedication to security and positively influence the security of the communications infrastructure to the benefit of all technology users," said Janne Uusilehto, Head of Nokia Product Security. "We look forward to working with SAFECode's members to promote secure software development practices." Membership in SAFECode is open to information and communications technology vendors with significant global business activity in technology products such as hardware, software and services who have demonstrated a commitment and dedicated resources to software assurance. For more information, please visit www.safecode.org. About SAFECode About Nokia Product and service names mentioned herein are the trademarks of their respective owners. ### |
|||||
Press Release -- Best Practices -- Download Press Release as pdf
Media Contact: FOR IMMEDIATE RELEASE SAFECode Outlines Current Industry Best Practices for Software Assurance
New report aims to increase understanding and adoption of the most effective secure development Arlington, Va. - Feb. 13, 2008 - The Software Assurance Forum for Excellence in Code (SAFECode), a non-profit organization exclusively dedicated to increasing trust in information technology (IT) products and services through the advancement of effective software assurance methods, today released its first member report, Software Assurance: An Overview of Current Industry Best Practices. The report outlines the secure development methods and integrity controls currently used by SAFECode members to deliver high-assurance systems to government and commercial customers. SAFECode members include EMC Corporation, Juniper Networks, Inc., Microsoft Corp., SAP AG and Symantec Corp. "Software assurance is a vital component to ensuring the security of critical information technology resources, and information and communications technology vendors thus have an obligation to address assurance through every stage of application development," said Paul Kurtz, executive director of SAFECode. "As the initial step in our efforts to help the industry meet this important responsibility, SAFECode has identified the assurance best practices that have proven to be effective across its member companies. By sharing this information, we hope to encourage the adoption of these types of practices by other software developers and respond to the growing customer desire for greater visibility into the steps technology vendors are taking to continually improve the security of their products." Software development processes vary by vendor according to their unique organizational structures and customer requirements. Yet regardless of the methods used, there is a core set of best practices for software assurance and security that apply to diverse development environments. The paper identifies and explains the following security best practices and controls that are currently in use by SAFECode members:
"Vendors who have implemented these best practices have seen dramatic improvements in software product assurance and security," said Kurtz. "We encourage all software developers and vendors to consider, tailor and adopt these practices into their own development environments. The result of efforts like these will be a higher level of end-user confidence in the quality and safety of software that underpins critical operations in governments, critical infrastructure and businesses worldwide." In the coming months, SAFECode will issue a number of reports building on these high-level best practices to offer specific and actionable information on the key concepts, principles, and research and development activities the organization is pursuing to improve software assurance and security. A full copy of Software Assurance: An Overview of Current Industry Best Practices is available for download at http://www.safecode.org/publications/SAFECode_BestPractices0208.pdf. The paper also includes eight important questions that organizations should ask vendors during the procurement process to help evaluate the software assurance of products or vendor engagements. About SAFECode Product and service names mentioned herein are the trademarks of their respective owners. ### |
|||||
Press Release -- SAFECode Formed -- Download Press Release as pdfLeading Technology Companies Form Industry Group to Advance Software Assurance SAFECode to promote best practices for the delivery of more secure and reliable software, hardware and services Paul Kurtz named executive director Arlington, VA. and London (RSA Conference Europe) -- Oct. 23, 2007 -- A group of leading information and communications technology companies today announced the formation of the Software Assurance Forum for Excellence in Code (SAFECode), a non-profit organization exclusively dedicated to increasing trust in information technology (IT) products and services through the advancement of proven software assurance methods. Founded by EMC Corporation, Juniper Networks, Inc., Microsoft Corporation, SAP AG, and Symantec Corp., SAFECode is the first global, industry-led effort to identify and promote best practices for developing and delivering more secure and reliable software, hardware and services. As the global dependence on information and communications technology has grown, users have become increasingly concerned over the integrity, security and reliability of software, hardware and services, especially those in the government, critical infrastructure and enterprise sectors. The need to reduce IT vulnerabilities, improve resistance to attack, and protect supply chain integrity has never been more important than in today's increasingly complex and dynamic threat environment. To help achieve these objectives and strengthen the security of the IT ecosystem, SAFECode unites key stakeholders in an effort to advance software assurance by developing and promoting a set of methods for secure product development and integrity controls that protect software, hardware and services across the global supply chain. While individual companies have implemented effective methods for developing and delivering more secure and reliable software, hardware and services, there has been no coordinated, industry-led effort to build upon this positive work and promote best practices to advance software assurance more broadly. SAFECode fills this critical gap by bringing together subject matter experts to identify and share proven vendor software assurance practices, promote broader adoption of such practices into the cyber ecosystem, and work with governments and critical infrastructure providers to leverage vendor practices to manage enterprise risks.
To help SAFECode achieve its objectives, the organization has named Paul Kurtz, a recognized cyber security expert, as its executive director. Currently a partner at Good Harbor Consulting LLC, Kurtz most recently served as the founding executive director of the Cyber Security Industry Alliance (CSIA). Prior to CSIA, he served in senior positions on the White House's National Security and Homeland Security Councils under Presidents Clinton and Bush. "Software assurance is a critical element of IT ecosystem security. By building on the positive work already done in this area by individual firms and encouraging broader adoption of proven best practices for the development and delivery of more secure technology products and services, SAFECode has a unique opportunity to significantly impact the overall security and reliability of the cyber infrastructure," said Paul Kurtz, executive director of SAFECode. "With the support of its founding members, SAFECode will work to meet the growing demand for information and dialogue on software assurance and increase the trust in IT and communications products and services." Membership in SAFECode is open to information and communications technology vendors with significant global business activity in IT technology products such as hardware, software and services who have demonstrated a commitment and dedicated resources to software assurance. In addition, SAFECode will be assembling an advisory of government leaders and critical infrastructure operators from around the globe to better understand and respond to key software assurance challenges. About SAFECode The Software Assurance Forum for Excellence in Code (SAFECode) is a non-profit organization exclusively dedicated to increasing trust in information and communications technology products and services through the advancement of proven software assurance methods. Founded by EMC Corporation, Juniper Networks, Inc., Microsoft Corporation, SAP AG and Symantec Corp., SAFECode works to identify and promote best practices for developing and delivering more secure and reliable software, hardware and services. For more information, please visit www.safecode.org.
Media Contact:
Membership Contact: |
|||||
Articles
Latest issue of ENISA Quarterly Magazine Online |
|||||
Audio Clips / Podcasts
WAMU NPR: Cyber Threats
IT Week Podcast: RSA Conference Europe |
|||||
|
© 2007-2008 Software Assurance Forum for Excellence in Code (SAFECode) - All Rights Reserved |