icon
Mail
Phone Stick
Phone
Webinar Covariate Software Vulnerability Discovery Model to Support Cybersecurity Test & Evaluation

Webinar: Covariate Software Vulnerability Discovery Model to Support Cybersecurity Test & Evaluation

Title of the talk: Covariate Software Vulnerability Discovery Model to Support Cybersecurity Test & Evaluation
Speaker: Assoc. Prof. Lance Fiondella (University of Massachusetts Dartmouth)

Abstract

Vulnerability discovery models (VDM) have been proposed as an application of software reliability growth models (SRGM) to software security related defects. VDM model the number of vulnerabilities discovered as a function of testing time, enabling quantitative measures of security. Despite their obvious utility, past VDM have been limited to parametric forms that do not consider the multiple activities software testers undertake in order to identify vulnerabilities. In contrast, covariate SRGM characterize the software defect discovery process in terms of one or more test activities. However, data sets documenting multiple security testing activities suitable for application of covariate models are not readily available in the open literature. To demonstrate the applicability of covariate SRGM to vulnerability discovery, this research identified a web application to target as well as multiple tools and techniques to test for vulnerabilities. The time dedicated to each test activity and the corresponding number of unique vulnerabilities discovered were documented and prepared in a format suitable for application of covariate SRGM. Analysis and prediction were then performed and compared with a flexible VDM without covariates, namely the Alhazmi-Malaiya Logistic Model (AML). Our results indicate that covariate VDM significantly outperformed the AML model on predictive and information theoretic measures of goodness of fit, suggesting that covariate VDM are a suitable and effective method to predict the impact of applying specific vulnerability discovery tools and techniques.

Date

Mar 10, 2023
Expired!

Time

8:45 AM - 10:00 AM

Local Time

  • Timezone: America/New_York
  • Date: Mar 9, 2023
  • Time: 8:45 PM - 10:00 PM

Speaker