Prediction capabilities of vulnerability discovery models

Proceedings - Annual Reliability and Maintainability Symposium

Volumn , Issue , 2006, Pages 86-91

  Alhazmi, Omar H ^a,b   Malaiya, Yashwant K ^a,b  

^a Department of Environmental and Radiological Health Sciences   (United States)

^b Colorado State University   (United States)

Author keywords

Intrusions; Operating systems; Quantitative models; Security holes; Vulnerability

Indexed keywords

INTRUSIONS; QUANTITATIVE MODELS; SECURITY HOLES; VULNERABILITY; VULNERABILITY DISCOVERY MODELS (VDM);

COMPUTATIONAL METHODS; COMPUTER OPERATING SYSTEMS; COMPUTER SOFTWARE; PARAMETER ESTIMATION; PREDICTIVE CONTROL SYSTEMS; RISK ASSESSMENT;

MATHEMATICAL MODELS;

EID: 34250212150     PISSN: 0149144X     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/RAMS.2006.1677355     Document Type: Conference Paper

References (14)

1. E. E. Schulte Jr., D. S. Brown, and T. A. Longstaff, "Responding to Computer Security Incidents," Lawrence Livermore National Laboratory, ftp://ftp.cert.dfn.de/pub/docs/csir/ihg.ps.gz, July 1990.
2. C. P. Pfleeger, "Security in Computing," Prentice-Hall, 1997.
3. R. J. Anderson, "Security in Opens versus Closed Systems - The Dance of Boltemann, Coase and Moore," Open Source Software: Economics, Law and Policy, Toulouse, France, June 2002.
4. st Annual Reliability and Maintainability Symposium, Alexandria,VA, January 2005, pp. 615-620.
5. E. Rescola, "Is finding security holes a good idea?" Security and Privacy, IEEE Security and Privacy, Vol. 03, No. 1, January-February 2005 pp. 14-19.
6. O. H. Alhazmi and Y. K. Malaiya, "Quantitative vulnerability assessment of systems software," to appear in Proc. International Symposium on Software Reliability Engineering, Chicago, IL, November 2005.
7. O. H. Alhazmi, Y. K. Malaiya, I. J. Ray, "Security Vulnerabilities in Software Systems: A Quantitative Perspective," to appear in the Proceedings of the 19th Annual IFIP WG 11.3 Working Conference on Data and Applications Security, Storrs, CT, August 2005, pp. 281-294.
8. th International Conference on Software Engineering, Silver Spring, MD, March 1984,pp. 230-238.
9. Y. K. Malaiya, N. Karunanithi, and P. Verma. "Predictability of software reliability models," IEEE Transactions on Reliability, Vol. 41, No. 4, pp. 539-546, December 1992.
10. Y. K. Malaiya and J. A. Denton. "What do software reliability parameters represent?" In Proc. International Symposium on Software Reliability Engineering, pages 124-135, Albuquerque, NM, November 1997.
11. ICAT Metabase, http://icat.nist.gov/icat.cfm, April 2005.
12. The MITRE Corporation, http://www.mitre.org, April 2005.
13. A. A. Abdel-Ghaly, P.Y. Chan, and B. Littlewood, "Evaluation of Competing Software Reliability Predictions," IEEE Transactions on Reliability, Vol. SE-12, No. 9, September 1986, pp. 950-967.
14. S. Brocklehurst, P.Y. Chan, B. Littlewood and J. Snell, "Recalibrating Software Reliability Models," IEEE Transactions on Software Engineering, Vol. 16, No. 9, April 1990. pp. 458-470.