u A set of reference applications with known vulnerabilities
u Papers in support of SAMATE metrics, including a methodology for
defining functional specifications, test suites, and software assurance
tool evaluation metrics.