Measuring the attack surfaces of two FTP daemons

Software consumers often need to choose between different software that provide the same functionality. Today, security is a quality that many consumers, especially system administrators, care about and will use in choosing one software system over another. An attack surface metric is a security metric for comparing the relative security of similar software systems [8]. The measure of a system's attack surface is an indicator of the system's security: given two systems, we compare their attack surface measurements to decide whether one is more secure than another along each of the following three dimensions: methods, channels, and data. In this paper, we use the attack surface metric to measure the attack surfaces of two open source FTP daemons:

• Type: Conference
• Year: 2006
• Where: CCS
• Authors: Pratyusa K. Manadhata, Jeannette M. Wing, Mark Flynn, Miles McQueen
• Keywords: Attack Surface Metric, Attack Surfaces, CCS 2006, Security Privacy, Software Systems