SAFECode releases software integrity guidance

The Software Assurance Forum for Excellence in Code (SAFECode), a nonprofit seeking to advance software assurance, on Monday released a new report that offers recommendations for avoiding vulnerabilities in the software development process. The free report, titled "An Overview of Software Integrity Controls: An Assurance-based Approach to Minimizing Risks in the Software Supply Chain," provides best practices areas such as contract agreements with suppliers, source code repositories and confirming received goods are not counterfeit. The report complements SAFECode's integrity framework. — DK

Sign up to our newsletters

More in News

House Intelligence Committee OKs amended version of controversial CISPA

Despite the 18-to-2 vote in favor of the bill proposal, privacy advocates likely will not be satisfied, considering two key amendments reportedly were shot down.

Judge rules hospital can ask ISP for help in ID'ing alleged hackers

The case stems from two incidents where at least one individual is accused of accessing the hospital's network to spread "defamatory" messages to employees.

Three LulzSec members plead guilty in London

Ryan Ackroyd, 26; Jake Davis, 20; and Mustafa al-Bassam, 18, who was not named until now because of his age, all admitted their involvement in the hacktivist gang's attack spree.