Software security is software reliability

ABSTRACT

Enlist hacker expertise, but stay with academic fault naming conventions, when defending against the risk of exploitation of vulnerabilities and intrusions.

REFERENCES

• 1: Elena Gabriela Barrantes , David H. Ackley , Trek S. Palmer , Darko Stefanovic , Dino Dai Zovi, Randomized instruction set emulation to disrupt binary code injection attacks, Proceedings of the 10th ACM conference on Computer and communications security, October 27-30, 2003, Washington D.C., USA [doi>10.1145/948109.948147]
• 2: Cespedes, J. ltrace. Online documentation; packages.debian.org/unstable/utils/ltrace.html.
• 3: Etoh, H. GCC Extension for Protecting Applications from Stack-smashing Attacks. Technical report and source code, first published May 8, 2001; www.trl.ibm.com/projects/security/ssp/.
• 4: Flake, H. Structural comparison of executable objects. In Proceedings of the Conference on Detection of Intrusions and Malware & Vulnerability Assessment (Dortmund, Germany, July 6--7, 2004), 161--173.
• 5: Benjamin A. Kuperman , Carla E. Brodley , Hilmi Ozdoganoglu , T. N. Vijaykumar , Ankit Jalote, Detection and prevention of stack buffer overflow attacks, Communications of the ACM, v.48 n.11, p.50-56, November 2005 [doi>10.1145/1096000.1096004]
• 6: Microsoft. Visual C Compiler Stack Protection. Microsoft Visual Studio 2005 documentation; msdn.microsoft.com/library/en-us/vccore/html/vclrfGSBufferSecurity.asp.
• 7: National Institute of Standards and Technology. National Vulnerability Database, Gaithersburg, MD; nvd.nist.gov/.
• 8: Reidel, D. Expository practice: Social, cognitive and epistemological linkages. In Expository Science, T. Shinn and R. Witley, Eds., 1985, 31--60.
• 9: Trenn, T. and Merton, R., Eds. The Genesis and Development of a Scientific Fact. University of Chicago Press, Chicago, 1979.

INDEX TERMS

Primary Classification:
  D. Software
  D.4 OPERATING SYSTEMS
      D.4.6 Security and Protection

Additional Classification:
  C. Computer Systems Organization
  C.2 COMPUTER-COMMUNICATION NETWORKS

  D. Software
  D.0 GENERAL

  K. Computing Milieux
  K.4 COMPUTERS AND SOCIETY
  K.5 LEGAL ASPECTS OF COMPUTING
  K.6 MANAGEMENT OF COMPUTING AND INFORMATION SYSTEMS
      K.6.5 Security and Protection (D.4.6, K.4.2)
  K.7 THE COMPUTING PROFESSION
      K.7.4 Professional Ethics