Delivering safe C++ Bjarne Stroustrup Columbia University www.stroustrup.comOverview • The challenges of safety • What is “safety”? • C++ Evolution • with a focus on safety • C++ Core Guidelines Government have begun initiatives to drive the culture of software development towards utilizing memory safe languages. • ... • NSA advises organizations to consider making a strategic shift from programming provide little or no inherent memory protection, such as C/C++, to a memory safe language when possible. Some examples of memory safe languages are C#, Go, Java, Ruby™, and Swift®. • NSA: https://www.open-std

A model tries to represent reality Framework is a way of looking at reality Not a modelCategorization Frameworks Categorization Frameworks - the framework proceeds the data • Put the data in exploitation; not for exploration & change Sense-making Frameworks Sense-making framework - the data proceeds the framework • Capture the data • Patterns emerge from the data • Provides context and

Agile for Defense Agile Coaching by Darin Plum Aug 6, 2014 1 My Take on Agile Coaching  The core to all Agile is maximizing each individuals potential through autonomy and mastery  Agile Agile is a journey, not a place and the Agile Coach is the guide  A coach must have a deep understanding of the Agile Principles and real world experience  Start with Servant Leadership; Command and the role of the Agile Coach: 1. Activity must have clear goals and process 2. Must have clear and immediate feedback 3. Confidence in ability to complete the task  The power of Agile frameworks (Scrum

behavior; Medical device operates correctly in response to inputs, including in failure scenarios (Fail-safe Design), to prevent harm or hazards to patient. Security: Protection of systems, networks, and data Lines of C++ CodeReminder to a simple, but often overlooked, question! Why C++? 23Can C++ usage be safe? Mitigate Safety and Security Vulnerabilities What can we do then? 24 Explore Tooling Processes decoupled architecture, Frequent tech debt reviews, Security/Compliance tracking, Established testing framework for upgrades, Proper dependency mgmt. (e.g., Conan), solid documentation, ...Safety Critical Path

NDIA's Agile in Government Summit 6/6/2018-6/7/2018. Keynotes: Major General Sarah Zabel http://www.ndia.org/events/2018/6/6/agile-in-government/proceedings Agile and EVMS They Can Co-exist! ( per mil/evm/ Incremental process, i.e. Rolling Wave Planning; Agile Release/Program Increment Planning. Scenario describes one method of how Agile can underpin EVM progress in support of tracking program cost an Agile development process • The scenario has defined a single product Release which is tracked using Earned Value • Shows alignment of EVM WBS elements to the Agile products hierarchy Agile Contracting

Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Institute, Deb Preuss, Agile Coaching InstitutePOWERFUL QUESTION POWERFUL QUESTION POWERFUL QUESTION POWERFUL QUESTION Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute Sources: Coaches Training Institute, Deb Preuss, Agile Coaching Institute What

acquisition framework for information technology (IT) that can keep pace with rapidly changing technologies and operations, including the challenges associated with information assurance. Agile development professionals with details on how to adopt Agile practices within each element of their programs, thus helping them to succeed in an increasingly complex environment. Agile has emerged as the leading industry development methodology, and has seen growing adoption across the DoD and other federal agencies. Agile practices enable the DoD to achieve reforms directed by Congress and DoD Acquisition Executives.

................................................................................... 34 Spring Framework Version 1.1.5 ii 3.15. Setting a bean property or constructor arg from a field value ......... ..................................................... Spring - Java/J2EE Application Framework Spring Framework Version 1.1.5 iii 6.1. Overview ..................................................... ................................................. 101 Spring - Java/J2EE Application Framework Spring Framework Version 1.1.5 iv 10.3.5. DriverManagerDataSource ....................................

r ................................................................................. 35 Spring Framework Version 1.2.6 ii 3.13.4. The PropertyPlaceholderConfigurer ................................... .................................................. 61 Spring - Java/J2EE Application Framework Spring Framework Version 1.2.6 iii 6.2.5. Custom pointcuts ........................................... .................................................. 99 Spring - Java/J2EE Application Framework Spring Framework Version 1.2.6 iv 8.7. Do you need an application server for transaction management? .

r ................................................................................. 35 Spring Framework Version 1.2.3 ii 3.13.4. The PropertyPlaceholderConfigurer ................................... .................................................. 71 Spring - Java/J2EE Application Framework Spring Framework Version 1.2.3 iii 5.11.1. Hot swappable target sources .............................. ................................................. 102 Spring - Java/J2EE Application Framework Spring Framework Version 1.2.3 iv 8.7. Adding support for additional metadata APIs ...................