arrow
Return

Mitigating Program Security Vulnerabilities: Approaches and Challenges

delete2012-06-14
delete69
PRE
AI
H
Hossain Shahriar *
M
Mohammad Zulkernine
DOI:10.1145/2187671.2187673delete
deleteOriginal
deleteOriginal request for help
deleteShare
deleteSave
Abstract

Abstract

En 中文
Programs are implemented in a variety of languages and contain serious vulnerabilities which might be exploited to cause security breaches. These vulnerabilities have been exploited in real life and caused damages to related stakeholders such as program users. As many security vulnerabilities belong to program code, many techniques have been applied to mitigate these vulnerabilities before program deployment. Unfortunately, there is no comprehensive comparative analysis of different vulnerability mitigation works. As a result, there exists an obscure mapping between the techniques, the addressed vulnerabilities, and the limitations of different approaches. This article attempts to address these issues. The work extensively compares and contrasts the existing program security vulnerability mitigation techniques, namely testing, static analysis, and hybrid analysis. We also discuss three other approaches employed to mitigate the most common program security vulnerabilities: secure programming, program transformation, and patching. The survey provides a comprehensive understanding of the current program security vulnerability mitigation approaches and challenges as well as their key characteristics and limitations. Moreover, our discussion highlights the open issues and future research directions in the area of program security vulnerability mitigation.
Keywords:
Security
Reliability
Program security vulnerability mitigation
vulnerability testing
static analysis
hybrid analysis
secure programming
program transformation
patching

Journal

ACM Computing Surveys cover
ACM Computing Surveys
IF:
28
Papers:
2.5K
Citations:
3.5W

Organization

Q
queens university - canada
Scholars:
1.8W
Papers: 1.7W
Citations: 29
Cited Papers

Cited Papers

Challenges and future of biomarker tests in the era of precision oncology: Can we rely on immunohistochemistry (IHC) or fluorescencein situhybridization (FISH) to select the optimal patients for matched therapy?
err2017-08-01
err0
errOAAI
errYoung Kwang Chae; Ayush Arya; Lauren Chiec; Hiral Shah; Ari Rosenberg; Sandip Patel; Kirtee Raparia; Jaehyuk Choi; Derek A. Wainwright; Victoria Villaflor; Massimo Cristofanilli; Francis Giles
errShare
errSave
An RGS2 3′UTR polymorphism is associated with preeclampsia in overweight women
err2016-08-24
err0
errOAAI
errTiina Karppanen; Tea Kaartokallio; Miira M. Klemetti; Seppo Heinonen; Eero Kajantie; Juha Kere; Katja Kivinen; Anneli Pouta; Anne Cathrine Staff; Hannele Laivuori
errShare
errSave
Cellular stress mechanisms of prenatal maternal stress: Heat shock factors and oxidative stress
err2019-09-01
err0
errOAAI
errJonathan Dowell; Benjamin A. Elser; Rachel E. Schroeder; Hanna E. Stevens
errShare
errSave
researcher View more