Software Vulnerability Analysis.pdfVIP

Computer Vulnerability Analysis Thesis Prop osal Ivan Krsul The COAST Lab oratory Department of Computer Sciences Purdue University West Lafayette IN krsulcspurdueedu Technical Rep ort CSDTR April Abstract Computer security professionals and researchers do not have a history of sharing and analyzing computer vulnerabili ty information Scientists and engineers from older or more established elds have long understo o d that publicizi ng analyzing and learning from other p eoples mistakes is essential to the stepwise renement of complex systems Computer scientists however have not followed suit Programmers reinvent classical programming mistakes contributing to the reapp earance of known vulnerabil i ties In the recent past computer systems have come to b e a part of critical systems that have a direct eect on the safety and wellb eing of human b eings and hence we must have lower tolerance for software failures In the dissertation I will attempt to show that computer vulnerabili ty information presents imp ortant regularities and these can b e detected and p ossibly visualized providing imp ortant insight ab out the reason of their prevalence and existence The information derived from these observations could b e used to improve on all phases of the development of software systems as could b e in the design development debuggi