© 2019 Perforce Software, Inc.
Achieving Software Safety, Security, and Reliability
Part 3 – What does the Future Hold?
perforce.com2 | © 2019 Perforce Software, Inc.
Presenter
Richard Bellairs
Product Marketing Manager
Richard has 20+ years of experience across a wide range of
industries. He held electronics and software engineering positions in
the manufacturing, defense, and test and measurement industries in
the nineties and early noughties before moving to product
management and product marketing. He now champions Perforce’s
market-leading code quality management solution.
perforce.com3 | © 2019 Perforce Software, Inc.
Achieving Software Safety, Security, and Reliability
Common Industry
Challenges
1
Applying Lessons From the
Automotive Industry
2
What Does the
Future Hold?
3
perforce.com4 | © 2019 Perforce Software, Inc.
Here’s What We’ll Cover Today
1
2
3
Embedded Programming (Language) Trends
Advances in Software Development Tools
The Future for Safety and Security Standards
(What does the Future Hold?)
Embedded Programming Language Trends
perforce.com6 | © 2019 Perforce Software, Inc.
TIOBE Programming Community Inex
Source: www.tiobe.com
perforce.com7 | © 2019 Perforce Software, Inc.
90%
of reported security
incidents result from exploits
against defects in the design
or code of software.
- The Software Engineering Institute (SEI)
70%
of security bugs are
memory safety issues.
- Microsoft
Advances in Software Development Tools
perforce.com11 | © 2019 Perforce Software, Inc.
TRENDS DEVELOPMENT TOOL CHANGES (CHALLENGES)
More safety-related functions controlled by software. Safety certification/pre-qualification.
Increasing connectivity exposing more security threats. Support for security standards.
Cloud-based and virtualized development environments. Support for VMs and containers (e.g. Docker).
Model driven development. Auto-generated code.
Multiple and geo-dispersed development teams. Shared output/collaboration features.
Continuous integration (CI) and continuous testing. Fast delivery of results.
Large scale systems. Multiple programming language support.
Parallel processing. Complex fault-finding.
perforce.com12 | © 2019 Perforce Software, Inc.
Development Methodologies
Requirements
Design
Implement
Test
Requirements
Design
Implement
Test
Requirements
Design
Implement
Test
Requirements
Design
Implement
Test
perforce.com13 | © 2019 Perforce Software, Inc.
Integrating Standards Compliance into the Process
Requirements
Functional
Non-Functional
Safety
Security
Quality
Test Verification
Requirements
Functional
Non-Functional
Test
Safety
Security
Quality
W A T E R F A L L
A P P R O A C H
A G I L E
A P P R O A C H
The Future for Safety and Security Standards
perforce.com15 | © 2019 Perforce Software, Inc.
Automotive
ISO 26262 2nd Edition ISO/PAS 21448 - SOTIF ISO/SAE 21434 - Cybersecurity
perforce.com16 | © 2019 Perforce Software, Inc.
perforce.com17 | © 2019 Perforce Software, Inc.
Medical
Medical device software —
Software life cycle processes
Health software — Software
life cycle processes
Questions?

Achieving Software Safety, Security, and Reliability Part 3: What Does the Future Hold?

  • 1.
    © 2019 PerforceSoftware, Inc. Achieving Software Safety, Security, and Reliability Part 3 – What does the Future Hold?
  • 2.
    perforce.com2 | ©2019 Perforce Software, Inc. Presenter Richard Bellairs Product Marketing Manager Richard has 20+ years of experience across a wide range of industries. He held electronics and software engineering positions in the manufacturing, defense, and test and measurement industries in the nineties and early noughties before moving to product management and product marketing. He now champions Perforce’s market-leading code quality management solution.
  • 3.
    perforce.com3 | ©2019 Perforce Software, Inc. Achieving Software Safety, Security, and Reliability Common Industry Challenges 1 Applying Lessons From the Automotive Industry 2 What Does the Future Hold? 3
  • 4.
    perforce.com4 | ©2019 Perforce Software, Inc. Here’s What We’ll Cover Today 1 2 3 Embedded Programming (Language) Trends Advances in Software Development Tools The Future for Safety and Security Standards (What does the Future Hold?)
  • 5.
  • 6.
    perforce.com6 | ©2019 Perforce Software, Inc. TIOBE Programming Community Inex Source: www.tiobe.com
  • 7.
    perforce.com7 | ©2019 Perforce Software, Inc.
  • 8.
    90% of reported security incidentsresult from exploits against defects in the design or code of software. - The Software Engineering Institute (SEI) 70% of security bugs are memory safety issues. - Microsoft
  • 10.
    Advances in SoftwareDevelopment Tools
  • 11.
    perforce.com11 | ©2019 Perforce Software, Inc. TRENDS DEVELOPMENT TOOL CHANGES (CHALLENGES) More safety-related functions controlled by software. Safety certification/pre-qualification. Increasing connectivity exposing more security threats. Support for security standards. Cloud-based and virtualized development environments. Support for VMs and containers (e.g. Docker). Model driven development. Auto-generated code. Multiple and geo-dispersed development teams. Shared output/collaboration features. Continuous integration (CI) and continuous testing. Fast delivery of results. Large scale systems. Multiple programming language support. Parallel processing. Complex fault-finding.
  • 12.
    perforce.com12 | ©2019 Perforce Software, Inc. Development Methodologies Requirements Design Implement Test Requirements Design Implement Test Requirements Design Implement Test Requirements Design Implement Test
  • 13.
    perforce.com13 | ©2019 Perforce Software, Inc. Integrating Standards Compliance into the Process Requirements Functional Non-Functional Safety Security Quality Test Verification Requirements Functional Non-Functional Test Safety Security Quality W A T E R F A L L A P P R O A C H A G I L E A P P R O A C H
  • 14.
    The Future forSafety and Security Standards
  • 15.
    perforce.com15 | ©2019 Perforce Software, Inc. Automotive ISO 26262 2nd Edition ISO/PAS 21448 - SOTIF ISO/SAE 21434 - Cybersecurity
  • 16.
    perforce.com16 | ©2019 Perforce Software, Inc.
  • 17.
    perforce.com17 | ©2019 Perforce Software, Inc. Medical Medical device software — Software life cycle processes Health software — Software life cycle processes
  • 18.