Insider Threat Control: Using Universal Serial Bus (USB) Device Auditing to Detect Possible Data Exfiltration by Malicious Insiders

This report presents methods to audit USB device use within a Microsoft Windows environment.

CMMI for Acquisition: Guidelines for Improving the Acquisition of Products and Services, Second Edition

CMMI for Acquisition, Second Edition is the definitive reference for CMMI-ACQ Version 1.3. This book describes best practices for the successful acquisition of products and services.

Profiling Systems Using the Defining Characteristics of Systems of Systems (SoS)

This technical note identifies and describes the characteristics that have been used in various definitions of the term system of systems.

A Proactive Means for Incorporating a Software Architecture Evaluation in a DoD System Acquisition

This technical note provides guidance on how to contractually incorporate architecture evaluations in an acquisition.

Making the Business Case for Software Assurance

This report provides guidance for those who want to make the business case for building software assurance into software products during each software development life-cycle activity.