Prioritization of Weapon System Software Assurance Assessment

Our proposal specifically addresses the stated requirements of the solicitation; we will develop and integrate software risk identification, assessment and analysis tools to enable a standardized Air Force approach to measuring and reducing software integration risks. The proposed EDAptive RAMP solution builds on previous Edaptive Computing, Inc (ECI) and Air Force knowledge and technology itself innovative to assist ASC plans for implementing a Agent of The Certifying Authority (ACA). The resulting capabilities will result in enhancing the Air Force"s existing RI3 software investment and will provide a software environment that allows integration with existing software risk analysis tools. Prior experience and new research has already shown that ECI"s innovative RAMP tools suite will be clearly adaptive to enhancing the Air Force and DoD"s software assurance (SwA) capabilities. BENEFIT: Opportunities for adoption and integration with software capabilities from external organizations, whether they are in the form of (open) source, executable applications, and/or component libraries continue to increase. This trend will grow and accelerate as the software industry in each of these areas continues to grow. Software has proven to be a key asset for the Air Force and other public and private enterprise operational success. The results of our successful technology transition will be immediately usable by Air Force software architects and the planned Agent of the Certifying Authority. Through RAMP, users will have a systematic method for identifying software integration risks and have a clear and prioritized plan for managing those risks through execution of software analysis tools. RAMP"s direct integration with software risk analysis tools will allow Air Force analysts and architects to be able to quickly know what third-party analysis tools should be used based upon the unique weapon system to be integrated with and its relevant operating environment. This benefit will incur minimal technology insertion impact within a myriad of USAF and DoD information enterprises while setting a more solid foundation for future work. The product of our effort will be based upon a proven process and software platformthe Air Force Research Lab"s Risk Identification: Integration & Ilities (RI3) calculator software developed by Edaptive for AFRL. This will enable Edaptive to expedite development of RAMP. The immediate warfighter applications are applicable to all those situations where external software needs to be integrated but yet has not been assessed for risks, or has not been accredited and/or certified. Closely related DoD applications include other engineering disciplines where external IP integration opportunities are applicable and risk is introduced. Similar requirements exist and may be addressed within diverse public sector realms: industrial systems, financial enterprises, homeland security, law enforcement, personal communications, and entertainment; those environments where external software integration poses risk.