A large scale exploratory analysis of software vulnerability life cycles

Abstract—Software systems inherently contain vulnerabilities that have been exploited in the past resulting in significant revenue losses. The study of vulnerability life cycles can help in the development, deployment, and maintenance of software systems. It can also help in designing future security policies and conducting audits of past incidents. Furthermore, such an analysis can help customers to assess the security risks associated with software products of different vendors. In this paper, we conduct an exploratory measurement study of a large software vulnerability data set containing 46310

• Type: Journal
• Year: 2012
• Where: ICSE
• Authors: Muhammad Shahzad, Muhammad Zubair Shafiq, Alex X. Liu
• Keywords: Exploratory Measurement, ICSE 2012, Measurement Study, Revenue Losses, Software Engineering