Timeline for What fraction of software bugs are vulnerabilities?
Current License: CC BY-SA 3.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jun 22, 2013 at 12:29 | answer | added | Mark E. Haase | timeline score: 4 | |
| Jun 22, 2013 at 8:09 | history | tweeted | twitter.com/#!/StackSecurity/status/348351994609692673 | ||
| Jun 22, 2013 at 8:02 | comment | added | CodesInChaos | Depends a lot of programming language, maturity of software, what you count as vulnerability/bug... Many vulnerabilities are configuration errors or mismatches between the user's/admin's mental model and the model the software assumes. | |
| Jun 22, 2013 at 8:02 | comment | added | tylerl | The catch is that as research progresses, existing non-security bugs can become security issues as people figure out how to exploit them. It would be interesting if people did the math though. But while we know how many security vulnerabilities get reported in popular software, we don't know how many bugs there are. Nor is there much consensus on what constitutes a bug (versus an undesired feature). | |
| Jun 22, 2013 at 7:56 | answer | added | rook | timeline score: 0 | |
| Jun 22, 2013 at 7:25 | history | asked | D.W. | CC BY-SA 3.0 |