Jump to content

Trustworthy Software Foundation: Difference between revisions

Add links
From Wikipedia, the free encyclopedia
Browse history interactively
← Previous edit
Content deleted Content added
VisualWikitext
m Add link for UK Resilience Definition
No edit summary
 
(20 intermediate revisions by 11 users not shown)
Line 1: Line 1:
{{Use British English|date=August 2013}}
⚫
The '''Trustworthy Software Initiative''' (TSI)<ref>[http://www.uk-tsi.org UK Trustworthy Software Initiative], retrieved 4 January 2014</ref> is a UK public good activity, sponsored<ref>[https://www.gov.uk/government/news/protecting-and-promoting-the-uk-in-a-digital-world-2-years-on Protecting and promoting the UK in a digital world: 2 years on] – Government Press Release, retrieved 12 December 2013</ref> by the UK government's [[Centre for the Protection of National Infrastructure]], with stated aim of improving software.
{{Use dmy dates|date=December 2019}}
{{Infobox organization
| caption =
| type = Not For Profit Foundation
| key_people = [[Alastair Revell]] (Chairman)
| footnotes =
| name = The Trustworthy Software Foundation
| founded_date = 2016
| location = London, United Kingdom
| origins = Trustworthy Software Initiative (TSI)
| area_served = Worldwide
| focus = Software Development
| method = Standards and their Verification
| revenue =
| endowment =
| num_volunteers =
| num_members =
| owner =
| homepage = {{URL|http://www.tsfdn.org}}
| tax_exempt =
| dissolved =
}}

The '''Trustworthy Software Foundation''' (TSFdn)<ref>[http://www.tsfdn.org Trustworthy Software Foundation], retrieved 2017-04-20</ref> is a UK not-for-profit organisation, with stated aim of improving software.{{Citation needed|date=January 2020}}


==History==
==History==
TSI evolved from a number of previous activities:
TSFdn evolved from a number of previous activities:
*A study by the Cabinet Office, Central Sponsor for Information Assurance (CSIA) in 2004-5 which identified a pervasive lack of secure software development practices as a matter for concern
*A study by the Cabinet Office, Central Sponsor for Information Assurance (CSIA) in 2004-5 which identified a pervasive lack of secure software development practices as a matter for concern
*A Department of Trade and Industry (DTI – predecessor of BIS) Global Watch Report in 2006 which noted a relative lack of secure software development practices in the UK
*A Department of Trade and Industry (DTI – predecessor of BIS) Global Watch Report in 2006 which noted a relative lack of secure software development practices in the UK
*The Technology Strategy Board (TSB) Cyber Security Knowledge Transfer Network (CSKTN) Special Interest Group (SIG) on Secure Software Development (SSD, 2007-8)
*The Technology Strategy Board (TSB) Cyber Security Knowledge Transfer Network (CSKTN) Special Interest Group (SIG) on Secure Software Development (SSD, 2007–8)
*The TSB / Foreign and Commonwealth Office (FCO) Science and Innovation Network (SIN) Multinational Workshop “Challenges to building in … information security, privacy and assurance”, held in Paris in March 2009
*The TSB / Foreign and Commonwealth Office (FCO) Science and Innovation Network (SIN) Multinational Workshop “Challenges to building in … [[information security]], privacy and assurance”, held in Paris in March 2009
*The Secure Software Development Partnership (SSDP) Study Period, funded jointly by TSB and the Centre for Protection of National Infrastructure, which ran in 2009-2010
*The Secure Software Development Partnership (SSDP) Study Period, funded jointly by the UK government' TSB and the [[Centre for the Protection of National Infrastructure]] (CPNI) organisations, which ran in 2009-2010
⚫
*The Trustworthy Software Initiative (TSI—originally Software Security, Dependability and Resilience Initiative—SSDRI), a UK public good activity sponsored<ref>[https://www.gov.uk/government/news/protecting-and-promoting-the-uk-in-a-digital-world-2-years-on Protecting and promoting the UK in a digital world: 2 years on] – Government Press Release, retrieved 12 December 2013</ref> by CPNI between 2011 and 2016


==Objectives==
The Trustworthy Software Initiative (TSI) was established, originally as the Software Security, Dependability and Resilience Initiative (SSDRI), in July 2011 to draw together the activity and provide a single point of reference for guidance and information about trustworthy software development. It was renamed from SSDRI to TSI in September 2012.
TSFdn primarily aims to provide a living backbone for signposting to diverse but often obscure sources of Good Practice, with a secondary objective to address other aspects of the 2009 Trustworthy Software Roadmap.<ref>[http://tsfdn.org/about-tsfdn/ About TSFdn], retrieved 2017-04-20</ref>


==Trustworthiness==
==Trustworthiness==
Line 21: Line 47:
* Security - The ability of the system to remain protected against accidental or deliberate attacks
* Security - The ability of the system to remain protected against accidental or deliberate attacks


This definition of trustworthiness is an extension of a widely used definition of dependability,<ref>"Software Engineering", I Sommerville, (9th Edition Feb 2010), ISBN 978-0137053469</ref> adding as a 5th Facet of Resilience based on the UK Government approach<ref>[https://www.cpni.gov.uk/system/files/documents/38/10/Open%20Data%20The%20Need%20for%20a%20Security%20Minded%20Approach%20-%20Summary.pdf WMG: CPNI: Security Minded Approach], retrieved 20 April 2017</ref>.
This definition of trustworthiness is an extension of a widely used definition of dependability,<ref>"Software Engineering", I Sommerville, (9th Edition Feb 2010), {{ISBN|978-0137053469}}</ref> adding as a 5th Facet of Resilience based on the [[Government of the United Kingdom|UK Government]] approach.<ref>[https://www.cpni.gov.uk/system/files/documents/38/10/Open%20Data%20The%20Need%20for%20a%20Security%20Minded%20Approach%20-%20Summary.pdf CPNI: Security Minded Approach], retrieved 2017-04-20</ref>

⚫
==Governance and Operation==
TSFdn operates as a not-for-profit Company Limited by Guarantee, jointly owned by the subscriber organisations – UK professional bodies.<ref>[http://tsfdn.org/about-tsfdn/ About TSFdn], retrieved 2017-04-20</ref>


It is based at the Cyber Security Centre of the [[University of Warwick]], and is formally linked to a cross section of stakeholders through the Advisory Committee on Trustworthy Software (ACTS).
⚫
==Operation==
TSI is operated on behalf of UK government by the Cyber Security Centre, [[University of Warwick]].


The Technical Lead remains [[Ian Bryant (Academic)|Ian Bryant]], the Technical Director of the predecessor TSI, and the Chair of the ACTS is [[Edmund Burton|Sir Edmund Burton KBE]],<ref>[http://tsfdn.org/about-tsfdn/ About TSFdn], retrieved 2017-04-20</ref> who was the President of the predecessor TSI.
It is managed by a technical director, a president representing stakeholder interests, and a team of vice-presidents responsible for particular communities of interest. Incumbent {{As of|2015|lc=y}} were technical director [[Ian Bryant (Academic)|Ian Bryant]] and president [[Edmund Burton|Sir Edmund Burton]].


==Activities==
==Activities==
* Making its Trustworthy Software Framework (TSF) into [[PAS754|British Standards (BS) Publicly Available Specification (PAS) 754]]
* Updating its Trustworthy Software Framework (TSFr), originally published as [[PAS754|British Standards (BS) Publicly Available Specification (PAS) 754]], into a British Standard (through BSI Project Committee ICT/00-/09, Chaired by Ian Bryant)
*Starting promulgation of Software Trustworthiness across Education, initially targeting the "technical" undergraduate community, with the assistance of the [[British Computer Society|BCS]] / [[Institution of Engineering and Technology|IET]]
* Continuing to engage with partners for promulgation of Software Trustworthiness across Education, in particular through the [[The Institution of Analysts and Programmers|IAP]], [[British Computer Society|BCS]] and the [[Institution of Engineering and Technology|IET]]
*Working with partners on means of Verification of Organisational Competence in Software Trustworthiness ([[TickIT|TickITPlus]])


== References ==
== References ==
{{reflist}}
{{reflist}}


⚫
[[Category:Computer security in the United Kingdom]]
[[Category:Information technology management]]
[[Category:Information technology management]]
[[Category:Information technology organisations based in the United Kingdom]]
[[Category:Organisations based in the London Borough of Ealing]]
[[Category:Software engineering organizations]]
[[Category:Software engineering organizations]]
⚫
[[Category:Science and technology in the United Kingdom]]

Latest revision as of 12:57, 13 April 2024

The Trustworthy Software Foundation
Founded2016
TypeNot For Profit Foundation
FocusSoftware Development
Location
  • London, United Kingdom
OriginsTrustworthy Software Initiative (TSI)
Area served
Worldwide
MethodStandards and their Verification
Key people
Alastair Revell (Chairman)
Websitewww.tsfdn.org

The Trustworthy Software Foundation (TSFdn)[1] is a UK not-for-profit organisation, with stated aim of improving software.[citation needed]

History

[edit]

TSFdn evolved from a number of previous activities:

  • A study by the Cabinet Office, Central Sponsor for Information Assurance (CSIA) in 2004-5 which identified a pervasive lack of secure software development practices as a matter for concern
  • A Department of Trade and Industry (DTI – predecessor of BIS) Global Watch Report in 2006 which noted a relative lack of secure software development practices in the UK
  • The Technology Strategy Board (TSB) Cyber Security Knowledge Transfer Network (CSKTN) Special Interest Group (SIG) on Secure Software Development (SSD, 2007–8)
  • The TSB / Foreign and Commonwealth Office (FCO) Science and Innovation Network (SIN) Multinational Workshop “Challenges to building in … information security, privacy and assurance”, held in Paris in March 2009
  • The Secure Software Development Partnership (SSDP) Study Period, funded jointly by the UK government' TSB and the Centre for the Protection of National Infrastructure (CPNI) organisations, which ran in 2009-2010
  • The Trustworthy Software Initiative (TSI—originally Software Security, Dependability and Resilience Initiative—SSDRI), a UK public good activity sponsored[2] by CPNI between 2011 and 2016

Objectives

[edit]

TSFdn primarily aims to provide a living backbone for signposting to diverse but often obscure sources of Good Practice, with a secondary objective to address other aspects of the 2009 Trustworthy Software Roadmap.[3]

Trustworthiness

[edit]

TSI considers that there are five facets of trustworthiness:

  • Safety - The ability of the system to operate without harmful states
  • Reliability - The ability of the system to deliver services as specified
  • Availability - The ability of the system to deliver services when requested
  • Resilience - The ability of the system to transform, renew, and recover in timely response to events
  • Security - The ability of the system to remain protected against accidental or deliberate attacks

This definition of trustworthiness is an extension of a widely used definition of dependability,[4] adding as a 5th Facet of Resilience based on the UK Government approach.[5]

Governance and Operation

[edit]

TSFdn operates as a not-for-profit Company Limited by Guarantee, jointly owned by the subscriber organisations – UK professional bodies.[6]

It is based at the Cyber Security Centre of the University of Warwick, and is formally linked to a cross section of stakeholders through the Advisory Committee on Trustworthy Software (ACTS).

The Technical Lead remains Ian Bryant, the Technical Director of the predecessor TSI, and the Chair of the ACTS is Sir Edmund Burton KBE,[7] who was the President of the predecessor TSI.

Activities

[edit]
  • Updating its Trustworthy Software Framework (TSFr), originally published as British Standards (BS) Publicly Available Specification (PAS) 754, into a British Standard (through BSI Project Committee ICT/00-/09, Chaired by Ian Bryant)
  • Continuing to engage with partners for promulgation of Software Trustworthiness across Education, in particular through the IAP, BCS and the IET

References

[edit]
  1. ^ Trustworthy Software Foundation, retrieved 2017-04-20
  2. ^ Protecting and promoting the UK in a digital world: 2 years on – Government Press Release, retrieved 12 December 2013
  3. ^ About TSFdn, retrieved 2017-04-20
  4. ^ "Software Engineering", I Sommerville, (9th Edition Feb 2010), ISBN 978-0137053469
  5. ^ CPNI: Security Minded Approach, retrieved 2017-04-20
  6. ^ About TSFdn, retrieved 2017-04-20
  7. ^ About TSFdn, retrieved 2017-04-20
Retrieved from "https://en.wikipedia.org/enwiki/w/index.php?title=Trustworthy_Software_Foundation&oldid=1218726719"