The proposal by the task force, which includes representatives from the private sector and government agencies, is part of a broader effort to ensure that software products used by the government meet consistent and predefined security standards.

The OMG hopes to develop "a formal way of measuring if software is trustworthy," said Djenana Campara, who co-chairs the Needham, Mass.-based consortium's Architecture-Driven Modernization Task Force.

The Software Assurance Framework standards would give vendors and software buyers a consistent way to evaluate the design robustness, reliability, process integrity and configuration controls of a system, said Campara, who is also chief technology officer at Klocwork Inc., a Burlington, Mass.-based vendor of vulnerability analysis software. Security Imperative

Such a framework is crucial for allowing software suppliers to submit claims about the integrity of their software and enabling purchasers to verify the claims, said Joe Jarzombek, director of software assurance at the U.S. Department of Homeland Security's National Cyber Security Division.

"The reason to have a standard is it tells you, 'Here's how [a vendor] can make a claim, here are the attributes we are looking for, and here are the things you need to include when making a claim,'" Jarzombek said. The DHS is involved in the effort to develop the standards framework.