An initial study on the use of execution complexity metrics as indicators of software vulnerabilities

Proceedings - International Conference on Software Engineering

Volumn , Issue , 2011, Pages 1-7

  Shin, Yonghee ^a   Williams, Laurie ^b  

^a DEPAUL UNIVERSITY   (United States)

^b NORTH CAROLINA STATE UNIVERSITY   (United States)

Author keywords

Complexity metrics; Execution metrics; Software security; Software vulnerability prediction

Indexed keywords

CODE EXECUTION; CODE INSPECTIONS; COMPLEX CODES; COMPLEXITY METRICS; DEVELOPMENT TIME; EXECUTION METRICS; FIREFOX WEB BROWSER; LARGE SIZES; MOZILLA; OPEN SOURCE PROJECTS; PREDICTION MODEL; PROTOCOL ANALYZERS; SOFTWARE ARTIFACTS; SOFTWARE SECURITY; SOFTWARE VULNERABILITIES; SOFTWARE VULNERABILITY PREDICTION; SOURCE CODES; WIRESHARK;

COMPUTATIONAL COMPLEXITY; FORECASTING; INTERNET PROTOCOLS; MATHEMATICAL MODELS; NETWORK PROTOCOLS; SECURITY OF DATA; SOFTWARE ENGINEERING; SOFTWARE TESTING; USER INTERFACES; WEB BROWSERS;

COBALT COMPOUNDS;

EID: 79959548762     PISSN: 02705257     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1988630.1988632     Document Type: Conference Paper

References (16)

1. complexity. Dictionary. Com unabridged. http://dictionary.reference.com/ browse/complexity.
2. Basili, V.R., Briand, L.C., and Melo, W.L. A validation of object-oriented design metrics as quality indicators. IEEE Trans. Software Eng. 22, 10 (1996), 751-761. (Pubitemid 126771690)
3. Cashell, B., Jackson, W.D., Jickling, M., and Webel, B. CRS Report for Congress: The Economic Impact of Cyber-Attacks. Congressional Research Service, 2004.
4. Curtis, B., Sheppard, S.B., Milliman, P., Borst, M.A., and Love, T. Measuring the Psychological Complexity of Software Maintenance Tasks with the Halstead and McCabe Metrics. IEEE Trans. Software Eng. SE-5, 2 (1979), 96-104. (Pubitemid 9445639)
5. Khoshgoftaar, T.M., Munson, J.C., and Lanning, D.L. Dynamic system complexity. [1993] Proceedings First International Software Metrics Symposium, 129-140.
6. Khoshgoftaar, T.M., Shan, R., and Allen, E.B. Using product, process, and execution metrics to predict fault-prone software modules with classification trees. Proc. Fifth Int'l Symp. on High Assurance Systems Engineering, 301-310.
7. McCabe, T.J. A Complexity Measure. IEEE Transactions on Software Engineering SE-2, 4 (1976), 308-320.
8. McGraw, G. Software Security: Building Security In. Addison-Wesley Professional, 2006.
9. Menzies, T., Greenwald, J., and Frank, A. Data Mining Static Code Attributes to Learn Defect Predictors. IEEE Transactions on Software Engineering 33, 1 (2007), 2-13. (Pubitemid 46002165)
10. Musa, J.D. Operational profiles in software-reliability engineering. IEEE Software 10, 2 (1993), 14-32.
11. Nagappan, N., Ball, T., and Zeller, A. Mining metrics to predict component failures. Proceeding of the 28th Int'l Conf. on Software Engineering, (2006), 452.
12. Shin, Y., Meneely, A., Williams, L., and Osborne, J.A. Evaluating Complexity, Code Churn, and Developer Activity Metrics as Indicators of Software Vulnerabilities. IEEE Transactions on Software Engineering (to appear), (2010).
13. Shin, Y. Investigating Complexity Metrics as Indicators of Software Vulnerability. Ph.D. Dissertation. 2010.
14. Witten, I.H. and Frank, E. Data Mining: Practical Machine Learning Tools and Techniques, Second Edition. Morgan Kaufmann, 2005.
15. Zimmermann, T., Nagappan, N., and Williams, L. Searching for a Needle in a Haystack: Predicting Security Vulnerabilities for Windows Vista. Third International Conference on Software Testing, Verification and Validation, (2010), 421-428.
16. Zimmermann, T. and Nagappan, N. Predicting defects using network analysis on dependency graphs. Proceedings of the 13th Int'l Conf. on Software Engineering, (2008), 531.