Towards a Unifying Approach in Understanding Security Problems

摘要: To evaluate security in the context of software reliability engineering, it is necessary to analyse problems, actual exploits, and their relationship with an understanding operational behaviour system. That can be done terms effort involved through classic factors such as calendar inservice time, etc. Existing studies focus primarily on problems exploits. Less attention has been given study between We present analysis classification 43,710 vulnerabilities from Open Source National Vulnerability Database for two specific products - Bugzilla FEDORA. About 35% published have exploited. 34% are disclosed a result exploit only 1.3% exploited after being publicly disclosed. investigate unifying approach, understand component reliability. disclosure exploits respect time impact process correcting discuss our approach using collected data.