.png){kind=icon}
返回
Measuring, analyzing and predicting security vulnerabilities in software systems
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2006.10.002.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
In this work we examine the feasibility of quantitatively characterizing some aspects of security. In particular, we investigate if it is possible to predict the number of vulnerabilities that can potentially be present in a software system but may not have been found yet. We use several major operating systems as representatives of complex software systems. The data on vulnerabilities discovered in these systems are analyzed. We examine the results to determine if the density of vulnerabilities in a program is a useful measure. We also address the question about what fraction of software defects are security related, i.e., are vulnerabilities. We examine the dynamics of vulnerability discovery hypothesizing that it may lead us to an estimate of the magnitude of the undiscovered vulnerabilities still present in the system. We consider the vulnerability discovery rate to see if models can be developed to project future trends. Finally, we use the data for both commercial and open-source systems to determine whether the key observations are generally applicable. Our results indicate that the values of vulnerability densities fall within a range of values, just like the commonly used measure of defect density for general defects. Our examination also reveals that it is possible to model the vulnerability discovery using a logistic model that can sometimes be approximated by a linear model. (C) 2006 Elsevier Ltd. All rights reserved.
Keyword:
vulnerabilities
security holes
risk evaluation
quantitative security modeling
defect density
AI总结
对已上传原文的论文进行重点信息的提取，主要内容包括：简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
暂无机构信息
引用论文
Thermocapillary flow‐induced core release from double‐emulsion droplets in microchannels.png)
Droplet
OAAI
DropletIF0
OAAI分享收藏Efficacy and Safety of Amlodipine Camsylate(Amodipin(TM)) for Treatment of Essential Hypertension
OAAI
OAAI分享收藏分享收藏
查看更多内容