Journal article
Mitigating Program Security Vulnerabilities: Approaches and Challenges
ACM computing surveys, Vol.44(3), 11
06/2012
Web of Science ID: WOS:000305584100002
Metrics
1 Record Views
Abstract
Programs are implemented in a variety of languages and contain serious vulnerabilities which might be exploited to cause security breaches. These vulnerabilities have been exploited in real life and caused damages to related stakeholders such as program users. As many security vulnerabilities belong to program code, many techniques have been applied to mitigate these vulnerabilities before program deployment. Unfortunately, there is no comprehensive comparative analysis of different vulnerability mitigation works. As a result, there exists an obscure mapping between the techniques, the addressed vulnerabilities, and the limitations of different approaches. This article attempts to address these issues. The work extensively compares and contrasts the existing program security vulnerability mitigation techniques, namely testing, static analysis, and hybrid analysis. We also discuss three other approaches employed to mitigate the most common program security vulnerabilities: secure programming, program transformation, and patching. The survey provides a comprehensive understanding of the current program security vulnerability mitigation approaches and challenges as well as their key characteristics and limitations. Moreover, our discussion highlights the open issues and future research directions in the area of program security vulnerability mitigation.
Related links
Details
- Title
- Mitigating Program Security Vulnerabilities: Approaches and Challenges
- Publication Details
- ACM computing surveys, Vol.44(3), 11
- Resource Type
- Journal article
- Publisher
- Association for Computing Machinery
- Number of pages
- 46
- Grant note
- Natural Sciences and Engineering Research Council of Canada (NSERC) Ontario Graduate Scholarship (OGS); Ontario Graduate Scholarship
- Copyright
- © 2012 ACM.
- Identifiers
- WOS:000305584100002; 99381798255806600
- Academic Unit
- Center for Cybersecurity and AI; Hal Marcus College of Science and Engineering
- Language
- English