The NIST workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) was held on 12 July 2016. The goal of this workshop was to gather ideas on how the Federal Government can identify, improve, package, deliver, or boost the use of software measures and metrics to significantly reduce vulnerabilities.

This report contains observations and recommendations from the workshop participants. This report also includes position statements submitted to the workshop, presentations at the workshop, and related material. Ideas from the workshop will be included in the Dramatically Reducing Software Vulnerabilities report, requested of NIST by the White House Office of Science and Technology Policy in Spring 2016.