12/9-10/2009 TGDC Meeting Open Ended Vulnerability Testing Update Nelson Hastings National Institute of Standards and Technology

Slides:

Advertisements

Similar presentations

TGDC Meeting, December 2011 Review of VVSG 1.1 Nelson Hastings, Ph.D. Technical Project Leader for Voting Standards, ITL

Advertisements

TGDC Meeting, December 2011 Usability and Accessibility (U&A) Research Update Sharon J. Laskowski, Ph.D.

12/9-10/2009 TGDC Meeting Ballot On Demand David Flater National Institute of Standards and Technology

IEEE P1622 Meeting, Oct 2011 IEEE P1622 Meeting October 24-25, 2011 Overview of IEEE P1622 Draft Standard for Electronic Distribution of Blank Ballots.

TGDC Meeting, July 2011 Review of VVSG 1.1 Nelson Hastings, Ph.D. Technical Project Leader for Voting Standards, ITL

Why Security Testing Is Hard by Herbert H. Thompson presented by Carlos Hernandez.

United States Election Assistance Commission Pilot Program Testing and Certification Manual & UOCAVA Pilot Program Testing and Certification Manual & UOCAVA.

12/9-10/2009 TGDC Meeting TGDC Recommendations Research as requested by the EAC John P. Wack National Institute of Standards and Technology

Improving U.S. Voting Systems The Voters’ Perspective: Next generation guidelines for usability and accessibility Sharon Laskowski NIST Whitney Quesenbery.

TGDC Meeting, July 2011 Overview of July TGDC Meeting Belinda L. Collins, Ph.D. Senior Advisor, Voting Standards, ITL

TGDC Meeting, December 2011 Michael Kass National Institute of Standards and Technology Update on SAMATE Automated Source Code Conformance.

Election Assistance Commission United States VVSG Technical Guidelines Development Committee (TGDC) NIST July 20, 2015 Gaithersburg,

TGDC Meeting, July 2011 Usability and Accessibility Test Methods: Preliminary Findings on Validation Sharon Laskowski, Ph.D. Manager, NIST Visualization.

TGDC Meeting, July 2011 UOCAVA Roadmap Update Nelson Hastings, Ph.D. Technical Project Leader for Voting Standards, ITL

Information Systems Security Computer System Life Cycle Security.

TGDC Meeting, July 2011 IEEE P.1622 Update John P. Wack Computer Scientist, Software and Systems Division, ITL

Making every vote count. United States Election Assistance Commission HAVA 101 TGDC Meeting December 9-10, 2009.

IEEE P1622 Meeting, Feb 2011 Common Data Format (CDF) Update John P. Wack National Institute of Standards and Technology

Improving U.S. Voting Systems Security Breakout Session Improving U.S. Voting Systems Andrew Regenscheid National Institute.

Usability and Accessibility Working Group Report Sharon Laskowski, PhD National Institute of Standards and Technology TGDC Meeting,

TGDC Meeting, December Common Data Format Directions John P. Wack National Institute of Standards and Technology

Briefing for NIST Acting Director James Turner regarding visit from EAC Commissioners March 26, 2008 For internal use only 1.

NIST Voting Program Activities Update February 21, 2007 Mark Skall Chief, Software Diagnostics and Conformance Testing Division.

TGDC Meeting, Jan 2011 Accessibility and Usability Considerations for UOCAVA Remote Electronic Voting Systems Sharon Laskowski, PhD National Institute.

12/9-10/2009 TGDC Meeting Usability and Accessibility Progress and Challenges Sharon Laskowski, PhD National Institute of Standards and Technology

Professional Certificate in Electoral Processes Understanding and Demonstrating Assessment Criteria Facilitator: Tony Cash.

Test Plans, Test Cases, and Test Reports

TGDC Meeting, July 2010 Report of the UOCAVA Working Group John Wack National Institute of Standards and Technology DRAFT.

NIST Voting Program Page 1 NIST Voting Program Lynne Rosenthal National Institute of Standards and Technology

TGDC Meeting, December 2011 Overview of December TGDC Meeting Belinda L. Collins, Ph.D. Senior Advisor, Voting Standards

NIST Voting Program Barbara Guttman 12/6/07

TGDC Meeting, July 2011 Voluntary Voting System Guidelines Roadmap Nelson Hastings, Ph.D. Technical Project Leader for Voting Standards, ITL

Adding SubtractingMultiplyingDividingMiscellaneous.

TGDC Meeting, Jan 2011 Help America Vote Act (HAVA) Roadmap Nelson Hastings National Institute of Standards and Technology

TGDC Meeting, July 2010 Report on Other Resolutions from Dec 2009 TGDC Meeting John Wack National Institute of Standards and Technology

TGDC Meeting, July 2010 Report on Logging Requirements in VVSG 2.0 Nelson Hastings National Institute of Standards and Technology

TGDC Meeting, Jan 2011 Common Data Format (CDF) Update John P. Wack National Institute of Standards and Technology

TGDC Meeting, Jan 2011 Review of UOCAVA Roadmap Nelson Hastings National Institute of Standards and Technology

NIST Voting Program Activities Update January 4, 2007 Mark Skall Chief, Software Diagnostics and Conformance Testing Division.

1 DECEMBER 9-10, 2009 Gaithersburg, Maryland TECHNICAL GUIDELINES DEVELOPMENT COMMITTEE Commissioner Donetta Davidson.

The VVSG Version 1.1 Overview Matthew Masterson Election Assistance Commission

Source Page US:official&tbm=isch&tbnid=Mli6kxZ3HfiCRM:&imgrefurl=

TGDC Meeting, July 2010 Overview of NIST Activities and TGDC Meeting Agenda Martin Herman, PhD National Institute of Standards and Technology

12/9-10/2009 TGDC Meeting The VVSG Version 1.1 Overview John P. Wack National Institute of Standards and Technology

TGDC Meeting, Jan 2011 Development of High Level Guidelines for UOCAVA voting systems Andrew Regenscheid National Institute of Standards and Technology.

TGDC Meeting, Jan 2011 Path Forward for FY11 UOCAVA Activities Nelson Hastings National Institute of Standards and Technology

Next VVSG Training Security: Testing Requirements October 15-17, 2007 Nelson Hastings Alicia Clay Jones National Institute of Standards and Technology.

12/9-10/2009 TGDC Meeting NIST-developed Test Suites David Flater National Institute of Standards and Technology

TGDC Pre-Meeting July , 2015 NIST Facility - Gaithersburg, Maryland Members : Designated Federal Official Matthew V. Masterson, EAC Commissioner,

TGDC Meeting, Jan 2011 Report from Workshop on UOCAVA Remote Voting Systems Nelson Hastings National Institute of Standards and Technology

TGDC Meeting, Jan 2011 VVSG 2.0 and Beyond: Usability and Accessibility Issues, Gaps, and Performance Tests Sharon Laskowski, PhD National Institute of.

Путешествуй со мной и узнаешь, где я сегодня побывал.

TGDC Meeting, July 2011 VVSG 1.1 Test Suite Status Mary Brady Manager, NIST Information Systems Group, Software and Systems Division, ITL

TGDC Meeting, Jan 2011 Accessibility and Usability Considerations for UOCAVA Remote Electronic Voting Systems Sharon Laskowski, PhD National Institute.

12/9-10/2009 TGDC Meeting Alternatives to Software Independence Nelson Hastings National Institute of Standards and Technology

The VVSG 2005 Revision Overview EAC Standards Board Meeting February 26-27, 2009 John P. Wack NIST Voting Program National Institute.

CSCE 548 Secure Software Development Security Operations

Page 1. Page 2 Page 3 Page 4 Page 5 Page 6 Page 7.

GeoMesh Blockchain Networking - Slide Presentation

مدیریت استراتژيک منابع انسانی

Software Verification and Validation

Software Verification and Validation

Election Assistance Commission

Ռազմավարական կառավարում

Adding with 9’s.

Adding with 10’s.

Software Verification and Validation

Adding ____ + 10.

OWASP Application Security Verification Standard

Presentation transcript:

12/9-10/2009 TGDC Meeting Open Ended Vulnerability Testing Update Nelson Hastings National Institute of Standards and Technology

12/9-10/2009 TGDC Meeting Motivation Page 2 The VVSG 2.0 provides open ended vulnerability testing (OEVT) as a test methodology Update on research related to OEVT to support EAC certification program Key issues: Cost and Repeatability

12/9-10/2009 TGDC Meeting Page 3 Research Methodologies Flaw hypotheses Security assertion based hypotheses Security fault analysis Ad hoc penetration testing No one methodology is satisfying, use the best aspects of each methodology

12/9-10/2009 TGDC Meeting Page 4 Research Keys to Quality OEVT Penetration tester experience and expertise Input to the testing Areas of investigation Allocation of resources

12/9-10/2009 TGDC Meeting Next Steps Develop OEVT methodology for voting systems Based on best features of the different methodologies How to use a review panel to help uniformity in OEVT Review of OEVT tester qualification Provide input during execution of OEVT Determining resources needed for OEVT Function of system design and implementation quality Function of known vulnerabilities Page 5