Streamlining the Process of Acquiring Secure Open Architecture Software Systems

Abstract

We present results from our ongoing investigation of how best to acquire secure open architecture (OA) software systems. These systems incorporate software product line (SPL) practices that include closed source proprietary software and open source software (OSS) components, where such components and overall system configurations are subject to different security requirements. The combination of SPLs and OSS components within secure OA systems represents a significant opportunity for reducing the acquisition costs of software-intensive systems. We seek to make this a simpler, more transparent, and more tractable process. Such a process must be easy to reuse, adapt, and streamline for different system application domains in order to realize cost reductions and improve acquisition workforce capabilities. Further, such a process should be aligned with Better Buying Power initiatives addressing OA systems, improved competition, defense affordability, and acquisition workforce improvements. We identify different ways and means for how to streamline the acquisition process for secure OA software systems through a focus on doing more with limited resources. Along the way, we pay particular attention to revealing how software licensing practices can affect cost in ways that hamper or better the buying power of acquisition programs.