Return
Mitigating Program Security Vulnerabilities: Approaches and Challenges
DOI:10.1145/2187671.2187673.png)
Abstract
En 中文
Programs are implemented in a variety of languages and contain serious vulnerabilities which might be exploited to cause security breaches. These vulnerabilities have been exploited in real life and caused damages to related stakeholders such as program users. As many security vulnerabilities belong to program code, many techniques have been applied to mitigate these vulnerabilities before program deployment. Unfortunately, there is no comprehensive comparative analysis of different vulnerability mitigation works. As a result, there exists an obscure mapping between the techniques, the addressed vulnerabilities, and the limitations of different approaches. This article attempts to address these issues. The work extensively compares and contrasts the existing program security vulnerability mitigation techniques, namely testing, static analysis, and hybrid analysis. We also discuss three other approaches employed to mitigate the most common program security vulnerabilities: secure programming, program transformation, and patching. The survey provides a comprehensive understanding of the current program security vulnerability mitigation approaches and challenges as well as their key characteristics and limitations. Moreover, our discussion highlights the open issues and future research directions in the area of program security vulnerability mitigation.
Keywords:
Security
Reliability
Program security vulnerability mitigation
vulnerability testing
static analysis
hybrid analysis
secure programming
program transformation
patching
Journal
IF:
28
Papers:
2.5K
Citations:
3.5W
Organization
Cited Papers
Challenges and future of biomarker tests in the era of precision oncology: Can we rely on immunohistochemistry (IHC) or fluorescencein situhybridization (FISH) to select the optimal patients for matched therapy?
Oncotarget
IF0

