U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Poster: What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors?

Published

Author(s)

David R. Kuhn, Mohammad Raunak, Raghu N. Kacker

Abstract

The analysis reported in this poster developed from questions that arose in discussions of the Reducing Software Vulnerabilities working group, sponsored by the White House Office of Science and Technology Policy in 2016 [1]. The key question we sought to address is the degree to which vulnerabilities arise from ordinary program errors, which may be detected in code reviews and functional testing, rather than post- release.
Conference Dates
April 10-11, 2018
Conference Location
Raleigh, NC
Conference Title
Hot Topics in the Science of Security
Pub Type
Conferences

Download Paper

https://doi.org/10.1145/3190619.3191686

Keywords

National Vulnerability Database, security vulnerabilities, software engineering
Information technology

Citation

Kuhn, D. , Raunak, M. and Kacker, R. (2018), Poster: What Proportion of Vulnerabilities can be Attributed to Ordinary Coding Errors?, Hot Topics in the Science of Security, Raleigh, NC, [online], https://doi.org/10.1145/3190619.3191686 (Accessed January 19, 2025)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created April 11, 2018, Updated November 10, 2018