This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
2010 29th IEEE Symposium on Reliable Distributed Systems
A Study on Latent Vulnerabilities
New Delhi, Punjab India
October 31-November 03
ISBN: 978-0-7695-4250-8
Software code reuse has long been touted as a reliable and efficient software development paradigm. Whilst this practice has numerous benefits, it is inherently susceptible to latent vulnerabilities. Source code which is re-used without being patched for various reasons may result in vulnerable binaries, despite the vulnerabilities being made publicly known. To aggravate matters, crackers have access to information on these vulnerabilities as well. Defenders need to ensure all loopholes are patched, while attackers need just one such loophole. In this work, we define latent vulnerabilities, and study the prevalence of the problem. This provides us the motivation, and an insight into the future work to be done in solving the problem. Our results show that unpatched source files which are more than one year old are commonly used in the latest operating systems. In fact, several of these files are more than ten years old. We explore the premises of using symbols in identifying binaries and conclude that they are insufficient in solving the problem. Additionally, we discuss two possible approaches to solve the problem.
Index Terms:
computer security, software safety, software protection, software reliability, software libraries
Citation:
Beng Heng Ng, Xin Hu, Atul Prakash, "A Study on Latent Vulnerabilities," srds, pp.333-337, 2010 29th IEEE Symposium on Reliable Distributed Systems, 2010
Usage of this product signifies your acceptance of the Terms of Use.