Software Assurance of Web-based Applications SAWbA

Software Assurance of Web-based Applications SAWbA Tim Kurtz SAIC/GRC Software Assurance Symposium 2004 Glenn Research Center at Lewis Field Problem • NASA is embracing the use of web-based applications (web-apps) to monitor, control and conduct space experiments as well as business type applications. • Internet commercialization has resulted in the development of software assurance practices that ensure proper operation of commercial web-apps. • NASA needs to identify and adopt a set of software assurance practices to ensure the successful operation of web-apps that monitor, control and conduct space experiments. Glenn Research Center at Lewis Field 2 Approach • Develop a research plan • Develop a web site for gathering survey information and publishing links, documents and tools http://osat-ext.grc.nasa.gov/rom/sawba • Gather information about SA tools – Internet search – Surveys – Conferences • Prepare Best Practices Guidebook • Pilot process • Report results Glenn Research Center at Lewis Field 3 Importance/Benefits • Provide guidance to Software Assurance Engineers when faced with a project that is developing webbased applications • Improve quality of web-based apps • Improve the project’s development methodology • Identify problems early so they can be fixed Glenn Research Center at Lewis Field 4 Relevance to NASA • • • • NASA is using web-applications in many areas Adaptable to all development efforts Provides tools for Software Assurance Engineers Ties in with the new NASA Software Engineering Requirements NPR Glenn Research Center at Lewis Field 5 Accomplishments • Developed web site for promoting web-app Software Assurance information and resources • Developed Best Practices Guidebook • Developed set of checklists that cover all phases of the lifecycle • Piloted the checklists on a web-based risk management application • Addresses Americans with Disabilities Act Glenn Research Center at Lewis Field 6 Next Steps • Promote use of the Guidebook • Continue to use checklists on projects • Refine and enhance the checklists as we get smarter Glenn Research Center at Lewis Field 7