Software Security for Open-Source Systems

Authors:
Crispin Cowan
Affiliations:
-
Venue:
IEEE Security and Privacy
Year:
2003

Citing 10
Cited 11

The cathedral and the bazaar: musings on Linux and open source by an accidental revolutionary

The cathedral and the bazaar: musings on Linux and open source by an accidental revolutionary
MOPS: an infrastructure for examining security properties of software

Proceedings of the 9th ACM conference on Computer and communications security
Using CQUAL for Static Analysis of Authorization Hook Placement

Proceedings of the 11th USENIX Security Symposium
Linux Security Modules: General Security Support for the Linux Kernel

Proceedings of the 11th USENIX Security Symposium
ITS4: A static vulnerability scanner for C and C++ code

ACSAC '00 Proceedings of the 16th Annual Computer Security Applications Conference
A wait-free algorithm for optimistic programming: HOPE realized

ICDCS '96 Proceedings of the 16th International Conference on Distributed Computing Systems (ICDCS '96)
Practical Domain and Type Enforcement for UNIX

SP '95 Proceedings of the 1995 IEEE Symposium on Security and Privacy
SubDomain: Parsimonious Server Security

LISA '00 Proceedings of the 14th USENIX conference on System administration
RaceGuard: kernel protection from temporary file race vulnerabilities

SSYM'01 Proceedings of the 10th conference on USENIX Security Symposium - Volume 10
StackGuard: automatic adaptive detection and prevention of buffer-overflow attacks

SSYM'98 Proceedings of the 7th conference on USENIX Security Symposium - Volume 7

Securing web application code by static analysis and runtime protection

Proceedings of the 13th international conference on World Wide Web
An intrusion tolerant architecture for dynamic content internet servers

Proceedings of the 2003 ACM workshop on Survivable and self-regenerative systems: in association with 10th ACM Conference on Computer and Communications Security
Certifying Open Source-The Linux Experience

IEEE Security and Privacy
Secure Software Development by Example

IEEE Security and Privacy
SPEE: a secure program execution environment tool using code integrity checking

Journal of High Speed Networks - Special issue on trusted internet workshop (TIW) 2004
Mitigating denial of service attacks: a tutorial

Journal of Computer Security
Have things changed now?: an empirical study of bug characteristics in modern open source software

Proceedings of the 1st workshop on Architectural and system support for improving software dependability
Increased security through open source

Communications of the ACM - The patent holder's dilemma: buy, sell, or troll?
Tracking system bugs: why are buffer overruns still around?

Proceedings of the 35th annual ACM SIGUCCS fall conference
The potential for the use of Open Source Software and Open Specifications in creating Web-based cross-border health spatial information systems

International Journal of Geographical Information Science
CODESSEAL: Compiler/FPGA approach to secure applications

ISI'05 Proceedings of the 2005 IEEE international conference on Intelligence and Security Informatics

Quantified Score

Hi-index	0.00

Visualization

Abstract

Debate over whether open-source software development leads to more or less secure software has raged for years. Fortunately, several security-enhancing technologies for open-source systems can help defenders improve their security.