This is a potential security issue, you are being redirected to https://csrc.nist.gov.
You have JavaScript disabled. This site requires JavaScript to be enabled for complete site functionality.
The widespread use of software that cannot be adequately characterized places society and government at unmeasurable risk. Software is embedded in countless systems responsible for providing U.S. critical infrastructure services that Americans rely on, as well as systems providing national security capabilities. Every deterrent capability the U.S. possesses—ranging from conventional and nuclear forces to economic tariffs and sanctions—vitally depends on software. Earlier this year, four U.S. Government agencies collaborated on a report titled “Closing the Software Understanding Gap”. This talk describes the national challenge, traces that challenge to a gap in our ability to understand software, and identifies key characteristics of what the solution requires.
Speaker Bios
Dr. Douglas Ghormley started at Sandia National Laboratories in 1998 after receiving a BS in Computer Engineering from CMU and a PhD in Computer Science from UC Berkeley. At Sandia, Doug has spent a career working on cyber-related challenges for a variety of national security missions. He is currently a Senior Scientist, specializing in cybersecurity. Currently, Doug’s focus is on the cyber challenges posed by the rapid adoption of third-party software into nearly every aspect of critical infrastructure and national security. He is engaging with various national-level leaders on the problem of Software Understanding for National Security (SUNS), including critical infrastructure.
Dr. Christopher Harrison joined Sandia National Laboratories in 2013 with a PhD in Computer Science from Auburn University. Christopher has been the principal investigator of many software understanding projects across the gamut of national security missions, and his research has spanned dynamic analysis, static analysis, and artificial intelligence for both forward and reverse engineering missions. Since 2019, he has served as a senior technical advisor to CISA, currently advising the Technical Director of the Cybersecurity Division. As part of that role, he engages with the Executive Office of the President and cybersecurity leaders at Departments and Agencies to address challenges related to Software Understanding for National Security (SUNS).