Results 11 to 20 of about 628 (208)
Modeling the Vulnerability Discovery Process [PDF]
16th IEEE International Symposium on Software Reliability Engineering (ISSRE'05), 2006 Security vulnerabilities in servers and operating systems are software defects that represent great risks. Both software developers and users are struggling to contain the risk posed by these vulnerabilities. The vulnerabilities are discovered by both developers and external testers throughout the life-span of a software system.
Omar Hussain Alhazmi +1 more
openaire +1 more source
Fast Format-Aware Fuzzing for Structured Input Applications
Applied Sciences, 2022 Fuzzing is one of the most successful software testing techniques used to discover vulnerabilities in programs. Without seeds that fit the input format, existing runtime dependency recognition strategies are limited by incompleteness and high overhead ...
Zehan Chen +4 more
doaj +1 more source
Vulnerability Discovery with Attack Injection [PDF]
IEEE Transactions on Software Engineering, 2010 The increasing reliance put on networked computer systems demands higher levels of dependability. This is even more relevant as new threats and forms of attack are constantly being revealed, compromising the security of systems. This paper addresses this problem by presenting an attack injection methodology for the automatic discovery of ...
João Antunes +4 more
openaire +1 more source
Modeling and Characterizing Software Vulnerabilities [PDF]
International Journal of Mathematical, Engineering and Management Sciences, 2017 With the association of software security assurance in the development of code based systems; software developers are relying on the Vulnerability discovery models to mitigate the breaches by estimating the total number of vulnerabilities, before they’re
Navneet Bhatt +3 more
doaj +1 more source
An independent validation of vulnerability discovery models [PDF]
Proceedings of the 7th ACM Symposium on Information, Computer and Communications Security, 2012 This paper is to appear in ASIACCS ...
Nguyen, Viet Hung, Massacci, Fabio
openaire +3 more sources
Automated vulnerability discovery method for 5G core network protocol
网络与信息安全学报With the widespread development of fifth-generation (5G) mobile communication technology, concerns regarding 5G network security have also increased.Blackbox fuzzing is a commonly used method for automated vulnerability discovery in software security ...
Peixiang WU +4 more
doaj +3 more sources
Network Protocol Vulnerability Mining Method Based on the Combination of Generative AdversarialNetwork and Mutation Strategy [PDF]
Jisuanji kexue, 2023 With the deep integration of informatization and industrialization,the security issues of industrial Internet of things(IIoT) network protocols are becoming increasingly prominent.Existing network protocol vulnerability mining techniques mainly relyon ...
ZHUANG Yuan, CAO Wenfang, SUN Guokai, SUN Jianguo, SHEN Linshan, YOU Yang, WANG Xiaopeng, ZHANG Yunhai
doaj +1 more source
Seasonal Variation in the Vulnerability Discovery Process [PDF]
2009 International Conference on Software Testing Verification and Validation, 2009 Vulnerability discovery rates need to be taken into account for evaluating security risks. Accurate projection of these rates is required to estimate the effort needed to develop patches for handling vulnerabilities discovered. Seasonal behaviors of the vulnerability discovery process for a multi-year life-cycle of software products are examined.
HyunChul Joh, Yashwant K. Malaiya
openaire +2 more sources
A Lightweight Assisted Vulnerability Discovery Method Using Deep Neural Networks
IEEE Access, 2019 Thousands of vulnerabilities are discovered in programs every day, which is extremely harmful to software security. Thus, discovering vulnerabilities in projects has become a central issue.
Runhao Li +3 more
doaj +1 more source
Effort Estimates for Vulnerability Discovery Projects
2012 45th Hawaii International Conference on System Sciences, 2012 Security vulnerabilities continue to be an issue in the software field and new severe vulnerabilities are discovered in software products each month. This paper analyzes estimates from domain experts on the amount of effort required for a penetration tester to find a zero-day vulnerability in a software product.
Teodor Sommestad +2 more
openaire +4 more sources