Reducing Risks of Widespread Faults and Attacks for Commercial Software Applications: Towards Diversity of Software Components

  • Authors:
  • Marco Casassa Mont;A. Baldwin;Y. Beres;Keith Harrison;M. Sadler;S. Shiu

  • Affiliations:
  • -;-;-;-;-;-

  • Venue:
  • COMPSAC '02 Proceedings of the 26th International Computer Software and Applications Conference on Prolonging Software Life: Development and Redevelopment
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

Recent IT attacks demonstrated how vulnerable consumers and enterprises are when adopting commercial and widely deployed operating systems, software applications and solutions.Diversity in software applications is fundamental to increase chances of survivability to faults and attacks. Current approaches to diversity are mainly based on the development of multiple versions of the same software, their parallel execution and the usage of votingmechanisms. Because of the high cost, they are used mainly for very critical and special cases.We introduce and discuss an alternative method to ensure diversity for common, widespread software applications without requiring additional resources. We describe a few encouraging results obtained from simulations.