Dear Software Assurance Community,
NIST is pleased to announce the kick off of the "Classic Track" of the 6th
Static Analysis Tool Exposition, SATE VI!
SATE is a non-competitive study of static analysis tool effectiveness, aiming
at improving tools and increasing public awareness and adoption.
In SATE VI’s Classic Track, we injected realistic vulnerabilities into large
programs to assess the ability of tools to find bugs that matter. Participants
should run their tool on these test sets and send us their reports. The SAMATE
team will analyze the reports to assess the tools’ effectiveness, strenghs and
areas of potential improvement. Preliminary results will be presented at a
workshop, where participants are encouraged to share their experience. Final
results will be published in a later report.
How to Participate:
To register for SATE VI, simply send an email, including the tool name and the
author/organization, to 'aure' [at] ‘nist.gov’, letting us know you would like
to participate.
Timeline:
• 2018-10-16: Registration opens.
• 2018-10-29: Test cases are released. Participants begin their
analysis.
• 2018-12-29: Tool run period ends. Participants submit their tool
reports.
• 2019-01-02: NIST starts analyzing the reports and providing feedback
to the participants.
• 2019, Quarter 2: SATE VI Workshop (Date TBD)
• 2019, Quarter 4: Publication of the SATE VI Report (Date TDB)
Participants will be acknowledged by name on the SATE website and in
publications. However, specific results will be anonymized to encourage
participation. Participants are free to release their results as they see fit.
Participation will remain undisclosed until the report submission deadline, and
participants who would like to withdraw must do so before the deadline. If a
participant withdraws, their intention to participate and decision to withdraw
will never be disclosed.
For more detailed information, visit our website:
https://samate.nist.gov/SATE.html, section “Classic Track”, or email ‘aure’
[at] ‘nist.gov’.
The study is open to all, so don’t hesitate to share this email with others.
Best regards,
Aurelien Delaitre
Software Assurance Metrics And Tool Evaluation (SAMATE)
National Institute of Standards and Technology (NIST)
Phone: +1 (301) 975-3296
