Windows of vulnerability: A case study analysis

Computer

Volumn 33, Issue 12, 2000, Pages 52-58

  Arbaugh, William A ^a   Fithen, William L ^b   McHugh, John ^b  

^a University of Maryland ^*  (United States)

^b NONE

Author keywords

[No Author keywords available]

Indexed keywords

DATA COMMUNICATION SYSTEMS; DATA PRIVACY; DATA STRUCTURES; INFORMATION RETRIEVAL SYSTEMS; INFORMATION TECHNOLOGY; INTERNET; LIFE CYCLE;

ACTIVE SYSTEM MANAGEMENT;

SECURITY OF DATA;

EID: 0034501876     PISSN: 00189162     EISSN: None     Source Type: Trade Journal    
DOI: 10.1109/2.889093     Document Type: Article

References (12)

1. J.D. Howard, "An Analysis of Security Incidents on the Internet," Engineering and Public Policy, Carnegie Mellon Univ., Pittsburgh, 1997.
2. Government Accounting Office, Information Security: Computer Attacks at Department of Defense Pose Increasing Risks, Washington, D.C., 1996.
3. B. Schneier, Closing the Window of Exposure: Reflections on the Future of Security, Securityfocus.com, 2000, http://www.securityfocus.com/templates/forum_message. html?forum=2&head=3384&id=3384.
4. K. Kendall, "A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems," BS/MS thesis, June 1999.
5. J. Myers, "CGI Security: Escape Newlines," Bugtraq, 1996, http://www.securityfocus.eom/archive/1/4262.
6. M. Crispin, "RFC206 - Internet Message Protocol" -version 4, revision 1, Internet Engineering Task Force, 1996.
7. D. Sacerdote, "imapd and ipop3d hole," 1997, Bugtraq, http://www.securityfocus.eom/archive/1/6370.
8. CERT Coordination Center, CERT Advisory CA-1997-09: "Vulnerability in IMAP and POP," http://www.cert. org/advisories/CA-1997-09.html, Pittsburgh, 1997.
9. T. Gray, "Attention: Please Update Your Imapd," pine-announce, 1998, http://www.washington.edu/pine/ pine-info/1998.07/msg00062.html.
10. Anonymous, "EMERGENCY: New Remote Root Exploit in UW imapd," 1998, Bugtraq, http://www. securityfocus.com/archive/1/9929.
11. CERT Coordination Center, CERT Advisory CA-1998-.09.imapd: "Buffer Overflow in Some Implementations of IMAP Servers," http://www.cert.org/advisories/ CA-1998.09.imapd.html, 1998.
12. CERT Coordination Center, CERT Advisory CA-98.05.bind_problems, "Multiple Vulnerabilities in BIND," http://www.cert.org/advisories/CA-1998.05.bind_problems.html, 1998.