Best Practices: ProveIT Case Study for the U.S. Air Force Software Assurance Center of Excellence

This case study examines a U.S. Air Force initiative to implement application security and software assurance practices following the massive breach of an Air Force information system.

The Air Force began realizing that it had been losing unknown quantities of data and information. Like the rest of the federal government, the Air Force was increasingly creating or acquiring Web-based systems or bolting on Web interfaces to legacy systems to open them up to outside systems and users - as well as threats and actual attacks.

This case study discusses:

• The approach taken by the Air Force in creating the Application Software Assurance Center of Excellence(ASACoE);
• Its approach to implementing software security;
• Defending critical government systems against threats and data loss