Are vulnerabilities discovered and resolved like other defects?

Patrick J. Morrison, Rahul Pandita, Xusheng Xiao, Ram Chillarege, Laurie A. Williams

Abstract

Context: Software defect data has long been used to drive software development process improvement. If security defects (i.e.,vulnerabilities) are discovered and resolved by different software development practices than non-security defects, the knowledge of that distinction could be applied to drive process improvement.

BibTeX

@inproceedings{Morrison-al:ICSE18,
  author    = {Patrick J. Morrison and
               Rahul Pandita and
               Xusheng Xiao and
               Ram Chillarege and
               Laurie A. Williams},
  title     = {Are vulnerabilities discovered and resolved like other defects?},
  booktitle = {ICSE},
  pages     = {498},
  publisher = {{ACM}},
  year      = {2018},
}

Are vulnerabilities discovered and resolved like other defects?

Abstract

Related papers