Estimating Software Vulnerabilities

Authors:
Jeffrey R. Jones
Affiliations:
Microsoft
Venue:
IEEE Security and Privacy
Year:
2007

Citing 0
Cited 5

Secure Software Engineering: Learning from the Past to Address Future Challenges

Information Security Journal: A Global Perspective
Environment Characterization and System Modeling Approach for the Quantitative Evaluation of Security

SAFECOMP '09 Proceedings of the 28th International Conference on Computer Safety, Reliability, and Security
Fuzzy classification metrics for scanner assessment and vulnerability reporting

IEEE Transactions on Information Forensics and Security
Are markets for vulnerabilities effective?

MIS Quarterly
Towards quantitative risk management for next generation networks

Telecommunication Economics

Quantified Score

Hi-index	0.00

Visualization

Abstract

Any given piece of software has some number of publicly disclosed vulnerabilities at any moment, leaving the system exposed to potential attack. The author presents a method for identifying and analyzing these vulnerabilities using public data from easily accessible sources.