Remediation of Application-Specific Security Vulnerabilities at Runtime

Bowen, Thomas F.; Segal, Mark E.

doi:10.1109/52.877867

Cited by 8 publications

(3 citation statements)

References 6 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…In "Remediation of Application-Specific Security Vulnerabilities at Runtime" by Thomas F. Brown and Mark E. Segal [32], the authors describe how the vulnerabilities that have already been patched by vendors remain unpatched at the client end due to inconsistencies in system checks and administrator overloads. The paper describes that there are four possible lines of defense against vulnerabilities:…”

Section: Literature Surveymentioning

confidence: 98%

See 1 more Smart Citation

Quantitative Evaluation of Related Web-Based Vulnerabilities

Subramanian

Loh

et al. 2010

2010 Fourth International Conference on Secure Software Integration and Reliability Improvement Companion

View full text Add to dashboard Cite

Current web application scanner reports contribute little to diagnosis and remediation when dealing with vulnerabilities that are related or vulnerability variants. We propose a quantitative framework that combines degree of confidence reports pre-computed from various scanners. The output is evaluated and mapped based on derived metrics to appropriate remediation for the detected vulnerabilities and vulnerability variants. The objective is to provide a trusted level of diagnosis and remediation that is appropriate. Examples based on commercial scanners and existing vulnerabilities and variants are used to demonstrate the framework's capability.

show abstract

Section: Literature Surveymentioning

confidence: 98%

“…In previous research [18], the need for complete remediation was stated. However, several remediations exist for a given vulnerability as do variants of a base vulnerability.…”

Section: Figure 2: Analysis Of Relationship Between Vulnerabilitiesmentioning

confidence: 98%

Quantitative Evaluation of Related Web-Based Vulnerabilities

Subramanian

Loh

et al. 2010

2010 Fourth International Conference on Secure Software Integration and Reliability Improvement Companion

View full text Add to dashboard Cite

show abstract

“…These external activities can be observed by monitoring the system calls the application makes and other interaction with local resources. Significant work has been done in actually restricting these calls at runtime to create a "sand box" like environment (see e.g., [1]). In most cases, however, the functionality that is traded for this increased security is too steep a price to pay.…”

Section: O N I T O R I N G F O R S Y M P T O M Smentioning

confidence: 99%

Software security vulnerability testing in hostile environments

Thompson

Whittaker

Mottay

2002

Proceedings of the 2002 ACM Symposium on Applied Computing

View full text Add to dashboard Cite

Traditional Black box software testing can be effective at exposing some classes of software failures.Security class failures, however, do not tend to manifest readily using these techniques. The problem is that many security failures occur in stressed environments, which appear in the field, but are often neglected during testing because of the difficulty to simulate these conditions. Software cart only be considered secure if it behaves securely under all operating environments. Hostile environment testing must thus be a part of any overall testing strategy. This paper describes this necessity and a black box approach for creating such environments in order to expose security vulnerabilities.

show abstract

Host-Based Security Challenges and Controls: A Survey of Contemporary Research

Price

2008

Information Security Journal: A Global Perspective

View full text Add to dashboard Cite

Remediation of Application-Specific Security Vulnerabilities at Runtime

Cited by 8 publications

References 6 publications

Quantitative Evaluation of Related Web-Based Vulnerabilities

Quantitative Evaluation of Related Web-Based Vulnerabilities

Software security vulnerability testing in hostile environments

Host-Based Security Challenges and Controls: A Survey of Contemporary Research

Contact Info

Product

Resources

About