Is finding security holes a good idea?

IEEE Security and Privacy

Volumn 3, Issue 1, 2005, Pages 14-19

  Rescorla, Eric ^a  

^a RTFM ^*

Author keywords

[No Author keywords available]

Indexed keywords

COMPUTER CRIME; COMPUTER OPERATING SYSTEMS; COMPUTER PROGRAMMING; COSTS; MATHEMATICAL MODELS; QUALITY ASSURANCE; SECURITY OF DATA;

BLACKHAT DISCOBERY (BHD); VULNERABILITY; VULNERABILITY LIFE CYCLE; WHITEHAT DISCOVERY (WHD);

SOFTWARE ENGINEERING;

EID: 14744276335     PISSN: 15407993     EISSN: None     Source Type: Journal    
DOI: 10.1109/MSP.2005.17     Document Type: Review

References (8)

1. H.K. Browne et al., A Trend Analysis of Exploitations, tech. report, Univ. of Maryland and Carnegie Mellon Univ., 2000.
2. B. Schneier, "Full Disclosure and the Window of Vulnerability," Crypto-Gram, 15 Sept. 2000, www.counterpane.com/cryptogram-0009.html#1.
3. R.C. Jeffrey, The Logic of Decision, Univ. of Chicago Press, 1965.
4. R.D. Luce and H. Raiffa, "Utility Theory," Games and Decisions, Dover, 1989, pp. 12-38.
5. A.L. Goel and K. Okumoto, "Time-Dependent Error Detection Rate Model for Software and Other Performance Measures," IEEE Trans. Reliability, vol. 28, no. 3, Aug. 1979, pp. 206-211.
6. DR. Cox and P.A.W. Lewis, The Statistical Analysis of a Series of Events, Chapman and Hal], 1966.
7. E. Rescorla, "Is Finding Security Holes a Good Idea?" Bugrate, Sept. 2004, www.rtfm.com/bugrate.html.
8. A. Chou et al., "An Empirical Study of Operating Systems Errors," Proc. Symp. Operating Systems Principles, ACM Press, 2001, pp. 73-88.