Home Publications

An Independent Validation of Vulnerability Discovery Models

Research Area: Uncategorized Year: 2012
Type of Publication: In Proceedings
  • Nguyen, Viet Hung
  • Massacci, Fabio
Book title: Proceeding of the 7th ACM Symposium on Information, Computer and Communications Security
partner: UNITN; project: NESSoS; tier B; citation: 2
Having a precise vulnerability discovery model (VDM) would provide a useful quantitative insight to assess software security. Thus far, several models have been proposed with some evidence supporting their goodness-of-fit. In this work we describe an independent validation of the applicability of these models to the vulnerabilities of the popular browsers Firefox, Google Chrome and Internet Explorer. The result shows that some VMDs do not simply fit the data, while for others there are both positive and negative evidences.