Sciweavers

TR
2008

Application of Vulnerability Discovery Models to Major Operating Systems

13 years 10 months ago
Application of Vulnerability Discovery Models to Major Operating Systems
A number of security vulnerabilities have been reported in the Windows, and Linux operating systems. Both the developers, and users of operating systems have to utilize significant resources to evaluate, and mitigate the risk posed by these vulnerabilities. Vulnerabilities are discovered throughout the life of a software system by both the developers, and external testers. Vulnerability discovery models are needed that describe the vulnerability discovery process for determining readiness for release, future resource allocation for patch development, and evaluating the risk of vulnerability exploitation. Here, we analytically describe six models that have been recently proposed, and evaluate those using actual data for four major operating systems. The applicability of the proposed models, and the significance of the parameters involved are examined. The results show that some of the models tend to capture the discovery process better than others.
Omar H. Alhazmi, Yashwant K. Malaiya
Added 15 Dec 2010
Updated 15 Dec 2010
Type Journal
Year 2008
Where TR
Authors Omar H. Alhazmi, Yashwant K. Malaiya
Comments (0)