Measuring the attack surfaces of two FTP daemons

Proceedings of the 2nd ACM Workshop on Quality of Protection, QoP'06. Co-located with the 13th ACM Conference on Computer and Communications Security, CCS'06

Volumn , Issue , 2006, Pages 3-10

  Manadhata, Pratyusa ^a   Wing, Jeannette ^a   Flynn, Mark ^b   McQueen, Miles ^b  

^a CARNEGIE MELLON UNIVERSITY   (United States)

^b IDAHO NATIONAL LABORATORY   (United States)

Author keywords

Attack surface; Attack surface metric; Security metric

Indexed keywords

ATTACK SURFACE METRIC; ATTACK SURFACES; CHANNEL DIMENSION; SECURITY METRIC; SOFTWARE CONSUMERS;

FILE ORGANIZATION; INTRUSION DETECTION; NETWORK PROTOCOLS; SAFETY FACTOR;

COMPUTER SOFTWARE SELECTION AND EVALUATION;

EID: 34547408485     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1179494.1179497     Document Type: Conference Paper

References (11)

1. CERT. Cert advisories. http://www.cert.org/.
2. GNU cflow, http://www.gnu.org/software/cflow.
3. D. DaCosta, C. Dahn, S. Mancoridis, and V. Prevelakis. Characterizing the security vulnerability likelihood of software functions. In Proc. of International Conference on Software Maintenance, 2003.
4. M. Howard. Fending off future attacks by reducing attack surface, http://msdn.microsoft.com/library/default.asp?url-/library/en-ue/dncode%/html/ secure02132003.asp, 2003.
5. M. Howard, J. Pincus, and J.M. Wing. Measuring relative attack surfaces,. In Proc. of Workshop on Advanced Developments in Software and Systems Security, 2003.
6. P. Manadhata and J. M. Wing. Measuring a system's attack surface. In Technical Report CMU-CS-04-102, 2004.
7. P. Manadhata and J. M. Wing. An attack surface metric. In Technical Report CMU-CS-05-155, 2005.
8. MITRE. Common vulnerabilities and exposures. http://cve.mitre.org/.
9. The ProFTPD Project. http://www.proftpd.org/.
10. The ProFTPD Project. Project goals. http://www.proftpd.org/goals.html.
11. Security Focus. Securityfocus vulnerabilities. http://www.securityfocus. com/vulnerabilities.