A Taxonomy of Computer Program Security Flaws, with Examples

A Taxonomy of Computer Program Security Flaws, with Examples (1993)

Cached

Download Links

by Carl Landwehr , Alan R. Bull , John P. Mcdermott , William , S. Choi

Citations:

BibTeX

@MISC{Landwehr93ataxonomy,
    author = {Carl Landwehr and Alan R. Bull and John P. Mcdermott and William and S. Choi},
    title = {A Taxonomy of Computer Program Security Flaws, with Examples},
    year = {1993}
}

OpenURL

Abstract

This paper provides a taxonomy for computer program security flaws together with an appendix that carefully documents 50 actual security flaws. These flaws have all been described previously in the open literature, but in widely separated places. For those new to the field of computer security, they provide a good introduction to the characteristics of security flaws and how they can arise. Because these flaws were not randomly selected from a valid statistical sample of such flaws, we make no strong claims concerning the likely distribution of actual security flaws within the taxonomy. However, this method of organizing security flaw data can help those who have custody of more representative samples to organize them and to focus their efforts to remove and, eventually, to prevent the introduction of security flaws. Categories and Subject Descriptors: D.4.6[Operating Systems]:Security and Protection---access

Keyphrases

computer program security flaw actual security flaw security flaw protection access computer security security flaw data likely distribution good introduction strong claim subject descriptor representative sample valid statistical sample computer program security open literature