Software Assurance Tips

The Software Assurance Tips contain the fully unclassified, publicly released musings of an Army Software Assurance team. While issues are shared with the team, we sometimes encounter tips and tricks that are better to share with the community. The contents of these tips are the opinions of their respective authors and should not be interpreted as an official policy of an organization.

Current Articles

Only the most recent 10 articles are displayed here and in the RSS feed. For a complete archive of articles, please see the Articles Archive.

• 20241118 - Fuzzy Coverage
• 20240902 - Back to the Building Blocks: Codifying Complacency
• 20240610 - The Zero Trust Paradox: Second Guessing the Good Guys
• 20240527 - Sorry Root, You're Not the Boss of Me!
• 20240212 - Assess Only v. Assess and Authorize
• 20230918 - A History of Verification, Validation, and Code Scanning
• 20230515 - Checkmarx: Use of Obsolete Function
• 20230410 - Ada Unchecked Conversions
• 20230403 - Coverity BAD_CAST
• 20221017 - Java, Inner Classes, and Checkmarx Unused Variable Findings

Website Source Code

The source code for the website is released to the public domain under the CC-0 license. The content for the articles is released under the CC-BY license. Source and article contents can be obtained from the github repository.