|COOKIES: By using this website you agree that we can place Google Analytics Cookies on your device for performance monitoring.|
Milk or wine: does software security improve with age?
If you have a question about this talk, please contact Saar Drimer.
We examine the code base of the OpenBSD operating system to determine whether its security is increasing over time. We measure the rate at which new code has been introduced and the rate at which vulnerabilities have been reported over the last 7.5 years and fifteen versions. We learn that 61% of the lines of code in today’s OpenBSD are foundational: they were introduced prior to the release of the initial version we studied and have not been altered since. We also learn that 62% of reported vulnerabilities were present when the study began and can also be considered to be foundational. We find strong statistical evidence of a decrease in the rate at which foundational vulnerabilities are being reported. However, this decrease is anything but brisk: foundational vulnerabilities have a median lifetime of at least 2.6 years. Finally, we examined the density of vulnerabilities in the code that was altered/introduced in each version. The densities ranged from 0 to 0.033 vulnerabilities reported per thousand lines of code. These densities will increase as more vulnerabilities are reported.
This talk is part of the Computer Laboratory Security Seminar series.
This talk is included in these lists:
Note that ex-directory lists are not shown.
Other listsPDN Postdoc Symposium Plenary talks Spring School 2008 - Translating animal models to patients with Neurodegenerative disorders women@CL Speaker Lunch Series
Other talksGRAND ROUNDS Bedford & Milton Keynes Waterway THE DRILLERS DON’T LIKE GETTING WET or WHY THE LAUNDRY ROOM KEEPS GETTING FLOODED : Water up to surprisingly high levels around the legs of large floating oil rigs A General Filter-Function Approach to Noise Filtering in Open-Loop Quantum Control Conservation of reef sharks in Arabia: between science and fisherman gossip Are we star dust or nuclear waste? Astonomy lecture