This list of resources that might be useful for improving software security is provided for information and convenience only. As part of a Federally Funded Research and Development Center (FFRDC), the CERT Coordination Center cannot endorse any products, services, or organizations.

Software Assurance

• State-of-the-Art Report on Software Security Assurance (pdf)
• Software Assurance in Acquisition: Reducing Risks to the Enterprise, v1.0 (procurement guide)
• State-of-the-Art Report on Software Project Management for Software Assurance
• Common Attack Pattern Enumeration and Classification (CAPEC)
• Common Weakness Enumeration (CWE)
• National Vulnerability Database
• Guidance for Avoiding Vulnerabilities through Language Selection and Use