loading...
 This Article 
   
 Share 
   
 Bibliographic References 
   
 Add to: 
 
Digg
Furl
Spurl
Blink
Simpy
Google
Del.icio.us
Y!MyWeb
 
 Search 
   
International Conference on Software Engineering Advances (ICSEA 2007)
Software Vulnerability Assessment Version Extraction and Verification
Cap Esterel, France
August 25-August 31
ISBN: 0-7695-2937-2
Martin Boldt, Blekinge Institute of Technology, Sweden
Bengt Carlsson, Blekinge Institute of Technology, Sweden
Roy Martinsson, Blekinge Institute of Technology, Sweden
Software vendors do not on a regular basis label their products with the exact software version. This is contrary to branded household products where model numbers and serial numbers allows the consumer to identify the product and get assistance if something goes wrong. We investigated version and product information within 8468 different software programs, where freeware and shareware showed a considerable lack of relevant information. A tool is proposed for identifying relevant version information and for verifying potential threats matched against a software vulnerability database. We suggest that software vendors in the future conform to general conventions of storing version information in a standardized way.
Citation:
Martin Boldt, Bengt Carlsson, Roy Martinsson, "Software Vulnerability Assessment Version Extraction and Verification," icsea, pp.59, International Conference on Software Engineering Advances (ICSEA 2007), 2007
Usage of this product signifies your acceptance of the Terms of Use.