Software Assurance: The Need for Definitions

Software Assurance is a subject that has differing definitions depending upon who is providing them. An examination of the literature, including end user materials has produced a series of definitions. The disconnect between these definitions provides for miscommunication and disagreement about paths and options during the software development progress. This research project set out to discover the different definitions and construct a model where the differences can be resolved. Two principle forms of the definition have emerged, one product related and the other process related. The results are useful to educators, practitioners and students alike, each using the appropriate definition at the appropriate moment to achieve greater levels of understanding of options associated with secure software development.