Wednesday Thursday Friday July 13, 2016 July 14, 2016 July 15, 2016 9:00 Welcome Reducing Software Vulnerabilities Cybersecurity and Supply Chain Risk Management Evolutions In Government AM Dramatically Reducing Software SAFECode Vulnerabilities (RSV): a Critical GSA Cybersecurity RFI responses Eric Baize, SAFECode Chair Part of the Cyber Security R&D Matthew Cornelius /TBD Strategic Plan Tentative Code Quality and DevOps Tim Polk, OSTP Barry Snyder, Fannie Mae CNSSD 505 SUPPLY CHAIN RISK MANAGEMENT (SCRM) Update Overview of current Plan for RSV Don Davidson, DoD Barbara Guttman, NIST Jon Boyens, NIST RSV element 1: Resilience & System Level Security Lee Badger, NIST Break Break Break 11:00 SCRM Case Studies (NIST) Reducing Software Vulnerabilities Industry perspective on FAR Basic (continued) Safeguarding of Contractor Information Exostar/Boeing SCRM Case Study Systems AM TBD, Exostar RSV element 2: Testing Framework TBD TBD, Boeing and Additive Software Analysis Paul E. Black, NIST "Security CISCO SCRM Case Study as a service" to address Edna Conway, Cisco "covered defense information" RSV element 3: Formal Methods and Richer Programming Environments Bob Metzger Richard Doyle, NASA RSV element 4: Program Diversity and Moving Target Defenses Konrad Vesey, MIT Lincoln Labs Lunch Lunch Lunch 1:30 Trustworthy Software Foundation (TSFdn) NICE Workforce Framework, Ian Bryant,TSFdn Scribner, Benjamin PM Cyber Incident Data and Analysis Working Secure Software Development Group (CIDAWG) Apprenticeship Beatrix Boyens, DHS Contract Dr. Nancy Mead, SEI Support Girish Seshagiri, ISHPI (DOL) Apprenticeships Thomas Ritchie – Tentative Break Break 3:30 Cybersecurity for Advanced Manufacturing Common Quality Enumeration (CQE) (CFAM) Joint Working Group Update and Preview (15 min) PM Kaye Ortiz, Defined Business John Marien, MITRE Solutions NIST Manufacturing MEP Cyber Dave Stieren, MEP Pat Toth, NIST
Wednesday July 13, 2016 Thursday July 14, 2016 Friday July 15, 2016 9:00 AM Welcome SAFECode Eric Baize, SAFECode Chair Code Quality and DevOps Barry Snyder, Fannie Mae Reducing Software Vulnerabilities Dramatically Reducing Software Vulnerabilities (RSV): a Critical Part of the Cyber Security R&D Strategic Plan Tim Polk, OSTP Overview of current Plan for RSV Barbara Guttman, NIST RSV element 1: Resilience & System Level Security Lee Badger, NIST Cybersecurity and Supply Chain Risk Management Evolutions In Government GSA Cybersecurity RFI responses Matthew Cornelius /TBD Tentative CNSSD 505 SUPPLY CHAIN RISK MANAGEMENT (SCRM) Update Don Davidson, DoD Jon Boyens, NIST Break Break Break 11:00 AM SCRM Case Studies (NIST) Exostar/Boeing SCRM Case Study TBD, Exostar TBD, Boeing CISCO SCRM Case Study Edna Conway, Cisco Reducing Software Vulnerabilities (continued) RSV element 2: Testing Framework and Additive Software Analysis Paul E. Black, NIST RSV element 3: Formal Methods and Richer Programming Environments Richard Doyle, NASA RSV element 4: Program Diversity and Moving Target Defenses Konrad Vesey, MIT Lincoln Labs Industry perspective on FAR Basic Safeguarding of Contractor Information Systems TBD "Security as a service" to address "covered defense information" Bob Metzger Lunch Lunch Lunch 1:30 PM Trustworthy Software Foundation (TSFdn) Ian Bryant,TSFdn Cyber Incident Data and Analysis Working Group (CIDAWG) Beatrix Boyens, DHS Contract Support NICE Workforce Framework, Scribner, Benjamin Secure Software Development Apprenticeship Dr. Nancy Mead, SEI Girish Seshagiri, ISHPI (DOL) Apprenticeships Thomas Ritchie – Tentative Break Break 3:30 PM Cybersecurity for Advanced Manufacturing (CFAM) Joint Working Group Kaye Ortiz, Defined Business Solutions NIST Manufacturing MEP Cyber Dave Stieren, MEP Pat Toth, NIST Common Quality Enumeration (CQE) Update and Preview (15 min) John Marien, MITRE
Summer_2016_draft_agenda_0601gsa%281%29.docx