Source Code Analysis Laboratory (SCALe) for Energy Delivery Systems

: The Source Code Analysis Laboratory (SCALe) is an operational capability that tests software applications for conformance to one of the CERT secure coding standards. CERT secure coding standards provide a detailed enumeration of coding errors that have resulted in vulnerabilities for commonly used software development languages. The SCALe team at CERT, a program of Carnegie Mellon University's Software Engineering Institute, analyzes a developer's source code and provides a detailed report of findings to guide the code's repair. After the developer has addressed these findings and the SCALe team determines that the product version conforms to the standard, CERT issues the developer a certificate and lists the system in a registry of conforming systems. This report details the SCALe process and provides an analysis of energy delivery systems. Though SCALe can be used in various capacities, it is particularly significant for conformance testing of energy delivery systems because of their critical importance.

PDF [588 KB]

Authors

Robert C. Seacord

Will Dormann

James McCurley

Philip Miller

Robert W. Stoddard

David Svoboda

Jefferson Welch

This report is related to the following area(s) of work:

Security and Survivability

Technical Report
CMU/SEI-2010-TR-021
December 2010

Cite This Report

SEI:

Seacord, Robert; Dormann, Will; McCurley, James; Miller, Philip; Stoddard, Robert; Svoboda, David; & Welch, Jefferson. Source Code Analysis Laboratory (SCALe) for Energy Delivery Systems (CMU/SEI-2010-TR-021). Software Engineering Institute, Carnegie Mellon University, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tr021.cfm

IEEE:

R. Seacord, W. Dormann, J. McCurley, P. Miller, R. Stoddard, D. Svoboda, and J. Welch, "Source Code Analysis Laboratory (SCALe) for Energy Delivery Systems," Software Engineering Institute, Carnegie Mellon University, Pittsburgh, Pennsylvania, Technical Report CMU/SEI-2010-TR-021, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tr021.cfm

APA:

Seacord, R., Dormann, W., McCurley, J., Miller, P., Stoddard, R., Svoboda, D., & Welch, J. (2010). Source Code Analysis Laboratory (SCALe) for Energy Delivery Systems (CMU/SEI-2010-TR-021). Retrieved May 20, 2013, from the Software Engineering Institute, Carnegie Mellon University website: http://www.sei.cmu.edu/library/abstracts/reports/10tr021.cfm

CHI:

Seacord, Robert, Will Dormann, James McCurley, Philip Miller, Robert Stoddard, David Svoboda, and Jefferson Welch. Source Code Analysis Laboratory (SCALe) for Energy Delivery Systems (CMU/SEI-2010-TR-021). Pittsburgh, PA: Software Engineering Institute, Carnegie Mellon University, 2010. http://www.sei.cmu.edu/library/abstracts/reports/10tr021.cfm

MLA:

Seacord, R., Dormann, W., McCurley, J., Miller, P., Stoddard, R., Svoboda, D., & Welch, J. 2010. Source Code Analysis Laboratory (SCALe) for Energy Delivery Systems (Technical Report CMU/SEI-2010-TR-021). Pittsburgh: Software Engineering Institute, Carnegie Mellon University. http://www.sei.cmu.edu/library/abstracts/reports/10tr021.cfm

Find Us Here

Find us on Youtube  Find us on LinkedIn  Find us on twitter  Find us on Facebook

Share This Page

Share on Facebook  Send to your Twitter page  Save to del.ico.us  Save to LinkedIn  Digg this  Stumble this page.  Add to Technorati favorites  Save this page on your Google Home Page 

For more information

Contact Us

info@sei.cmu.edu

412-268-5800

Help us improve

Visitor feedback helps us continually improve our site.

Please tell us what you
think with this short
(< 5 minute) survey.