Published: October 16, 2014
Apostol T. Vassilev, Christopher Celi
The recently discovered Heartbleed bug in OpenSSLs implementation of Internet security protocols and the aftermath from dealing with its consequences highlights a critical problem in the software industry. Software is routinely, inadequately tested leading to devastating security holes with far reaching consequences for ordinary people and service providers on the Internet. We show that readily available testing technologies can be employed to improve the scope and depth of software testing. This, combined with government and industry emerging standards and recommendations, could change the incentives for technology companies to respond to the increasing societal demands for security on the Internet.
Citation: Computer (IEEE Computer)
Pub Type: Journals
Created October 16, 2014, Updated November 10, 2018