Goto Fail & Heartbleed: Two Case Studies in Software Assurance

Newsgroups	comp.programming
Date	2015-04-21 12:41 -0700
Message-ID	<aaa2b99b-69e2-49d7-b3bf-1cfa085f9b36@googlegroups.com> (permalink)
Subject	Goto Fail & Heartbleed: Two Case Studies in Software Assurance
From	Heidi Brayer <hap1026@gmail.com>

Show all headers | View raw

Mitre's Top 25 Most Dangerous Software Errors is a list that details quality problems, as well as security problems. This list aims to help software developers "prevent the kinds of vulnerabilities that plague the software industry, by identifying and avoiding all-too-common mistakes that occur before software is even shipped." These vulnerabilities often result in software that does not function as intended, presenting an opportunity for attackers to compromise a system. This blog post highlights our research in examining techniques used for addressing software defects in general and how those can be applied to improve security detection and management.

To read the complete post, please visit 
http://blog.sei.cmu.edu/post.cfm/heartbleed-gotofail-predicting-software-assurance-110

Back to comp.programming | Previous | Next | Find similar | Unroll thread

Thread

Goto Fail & Heartbleed: Two Case Studies in Software Assurance Heidi Brayer <hap1026@gmail.com> - 2015-04-21 12:41 -0700

csiph-web