# Threat Model Thursday: NIST's Code Verification Standard

DevFeed: [Threat Model Thursday: NIST's Code Verification Standard](<https://devfeed.tech/articles/threat-model-thursday-nist-s-code-verification-standard-37067.md>)

Original publisher: [Read original article](<https://shostack.org/blog/tmt-NIST-code-verification-standard/>)

Author: Adam

Published: 2021-07-15T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [standard](<https://devfeed.tech/topics/standard.md>), [Testing](<https://devfeed.tech/topics/testing.md>), [Code](<https://devfeed.tech/topics/code.md>), [Development](<https://devfeed.tech/topics/development.md>)

Tags: [code](<https://devfeed.tech/tags/code.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [fuzzing](<https://devfeed.tech/tags/fuzzing.md>), [gcc](<https://devfeed.tech/tags/gcc.md>), [nist](<https://devfeed.tech/tags/nist.md>), [software](<https://devfeed.tech/tags/software.md>), [standard](<https://devfeed.tech/tags/standard.md>), [testing](<https://devfeed.tech/tags/testing.md>), [verification](<https://devfeed.tech/tags/verification.md>)

## AI overview

The article examines NIST's Recommended Minimum Standard for Vendor or Developer Verification of Code, including its technical requirements and emphasis on threat modeling. It highlights the standard's coverage of automated testing, static and dynamic analysis, included software, and bug fixing, while arguing that developers should prepare for the new requirements.

## Source excerpt

Earlier this week, NIST released a Recommended Minimum Standard for Vendor or Developer Verification of Code. I want to talk about the technical standard overall, the threat modeling component, and the what the standard means now and in the future.