Using complexity metrics to improve software security

摘要: Information technology is quickly spreading across critical infrastructures and software has become an inevitable part of industries organisations. At the same time, many cyberthreats are result poor coding. Stuxnet, which was most powerful cyber-weapon used against industrial control systems, exploited zero-day vulnerabilities in Microsoft Windows. 1 The US Department Homeland Security (DHS) also announced that among three common cyber-security Industrial Control Systems (ICSs). 2 Therefore, improving security important role increasing level computer-based systems. Software vulnerability prediction a tedious task, so automating would save lot time resources. One recently methodology based on automatic fault using metrics. Here, Sara Moshtari, Ashkan Sami Mahdi Azimi Shiraz University, Iran build previous studies by providing more complete information. They show what can be achieved different classification techniques