An automated framework for managing security vulnerabilities

Information Management and Computer Security

Volumn 13, Issue 2, 2005, Pages 156-166

  Al Ayed, A ^a   Furnell, S M ^a   Zhao, D ^a   Dowland, P S ^a  

^a UNIVERSITY OF PLYMOUTH   (United Kingdom)

Author keywords

Data security; Risk management; Security products

Indexed keywords

AUTOMATION; CLIENT SERVER COMPUTER SYSTEMS; COMPUTER SOFTWARE; INFORMATION TECHNOLOGY; INTERNET; RISK MANAGEMENT;

SECURITY PRODUCTS; SOFTWARE VULNERABILITY;

SECURITY OF DATA;

EID: 18244372167     PISSN: 09685227     EISSN: None     Source Type: Journal    
DOI: 10.1108/09685220510589334     Document Type: Article

References (9)

1. Alayed, A., Furnell, S.M. and Barlow, I.M. (2002), "Addressing internet security vulnerabilities: A benchmarking study", in Ghonaimy, M.A., El-Hadidi, M.T. and Aslan, H.K. (Eds), Security in the Information Society: Visions and Perspectives, Kluwer Academic Publishers, Boston, MA, pp. 121-32.
2. CERT (2004), CERT Statistics 1988-2004, CERT Coordination Centre, Pittsburgh, PA, available at: www.cert.org/stats/cert_stats.html
3. eEye (2001), Retina: The Network Security Scanner, eEye-Digital Security, Aliso Viejo, CA, available at: www.eeye.com/html/assets/pdf/ retina_whitepaper.pdf
4. Forristal, J. and Shipley, G. (2001), "Vulnerability assessment scanners: Detection result", Network Computing, 8 January, available at: www.networkcomputing.com/1201/1201f1b1.html
5. Furnell, S.M., Al-Ayed, A., Barlow, I.M. and Dowland, P.S. (2002), "Critical awareness - the problem of monitoring security vulnerabilities", Proceedings of European Conference on Information Warfare and Security, Brunel University, Uxbridge, 8-9 July, pp. 85-92.
6. Goodwin, B. (2004), "Users face five years of patching pain as security flaws keep rising", Computer Weekly, 5 October, pp. 1-4.
7. Microsoft Corporation (2003), "Microsoft Strategic Technology Protection Program", 2 July, available at: www.microsoft.com/ security/mstpp.asp
8. SANS Institute (2004), "SANS ®ISK: The consensus security alert", available at: www.sans.org/newsletters/risk/
9. Symantec (2004), "Symantec internet security threat report", Volumes I-VI, Symantec, September, available at: http://enterprisesecurity.symantec.com/content.cfm?articleid=1539