On the Effectiveness of Software Diversity: A Systematic Study on Real-World Vulnerabilities

Abstract. Many systems have been introduced to detect software intrusions by comparing the outputs and behavior of diverse replicas when they are processing the same, potentially malicious, input. When these replicas are constructed using off-the-shelf software products, it is assumed that they are diverse and not compromised simultaneously under the same attack. In this paper, we analyze vulnerabilities published in 2007 to evaluate the extent to which this assumption is valid. We focus on vulnerabilities in application software, and show that the majority of these software products

• Type: Conference
• Year: 2009
• Where: DIMVA
• Authors: Jin Han, Debin Gao, Robert H. Deng
• Keywords: DIMVA 2007, DIMVA 2009, Off-the-shelf Software Products, Software Intrusions, Software Products