respect to security, correctness of operation, and robustness. This goal extended
to assessing “confidence” in the effectiveness of existing software assurance
tools—namely the accuracy of reporting features and the incidence of false
positives and negatives. Due to the variability across tool suites, however,