Missions and impacts to US industry, economy and citizens
summary
NIST explains concrete results and tools: combinatorial covering arrays and a covering array generator that supports constraints and variable strengths, generates up to six‑way combinations, and turns 10 binary variables into just 13 tests for all 3‑way combos. Empirical claims include Lockheed Martin reporting roughly 20% savings in test development costs, Rockwell Collins shrinking 47,000 MCDC tests dramatically, and field data showing >90% fault detection with four‑ or five‑way coverage; the tools and measurements are implemented and in use.
AI-written summary · about
chapters (25)
- 0:00Intro
- 0:32Mission Statement
- 5:05Security
- 5:59Delivery mechanisms
- 7:37Cybersecurity education
- 8:25Congressional mandates
- 9:40Smart grid
- 10:23Security testing
- 13:07Lockheed Martin study
- 13:54Rockwell Collins study
- 14:50Interaction faults
- 18:37Server fault distribution
- 19:24Database fault distribution
- 21:11Network security fault distribution
- 21:47Summary
- 22:02Interaction rule
- 23:59How many tests
- 25:12Covering array
- 25:48Algorithm
- 27:37Simulation
- 31:04Tools
- 35:51Output
- 36:02Users
- 36:34Human readable
- 37:04Contact information
related talks
40mThree’s Company: Unpacking and Settling in with Three NIST Frameworks
16mBluetooth Low Energy Security Testing with Combinatorial Methods
44mImprove Likelihood Calculation by Mapping MITRE ATT&CK to Existing Controls
13mICS Testbed Tetris: Practical Building Blocks Towards a Cyber Security Resource
14mClosing + CTF Wrap Up
01h 05mTheory and Security
35mBreaking Boundaries with Adversarial Testing
28mForesight Analysis: The Magic Eight Ball of Intelligence Analysis