Increasing software security through open source or closed source development? Empirics suggest that we have asked the wrong question

G. Schryen, R. Eliot, in: 43rd Annual Hawaii International Conference on System Sciences, 2010.

Download
OA 299.38 KB
Conference Paper | English
Author
Abstract
While many theoretical arguments against or in favor of open source and closed source software development have been presented, the empirical basis for the assessment of arguments and the development of models is still weak. Addressing this research gap, this paper presents the first comprehensive empirical investigation of published vulnerabilities and patches of 17 widely deployed open source and closed source software packages, including operating systems, database systems, web browsers, email clients, and office systems. The empirical analysis uses comprehensive vulnerability data contained in the NIST National Vulnerability Database and a newly compiled data set of vulnerability patches. The results suggest that it is not the particular software development style that determines the severity of vulnerabilities and vendors? patching behavior, but rather the specific application type and the policy of the particular development community, respectively.
Publishing Year
Proceedings Title
43rd Annual Hawaii International Conference on System Sciences
LibreCat-ID

Cite this

Schryen G, Eliot R. Increasing software security through open source or closed source development? Empirics suggest that we have asked the wrong question. In: 43rd Annual Hawaii International Conference on System Sciences. ; 2010.
Schryen, G., & Eliot, R. (2010). Increasing software security through open source or closed source development? Empirics suggest that we have asked the wrong question. In 43rd Annual Hawaii International Conference on System Sciences.
@inproceedings{Schryen_Eliot_2010, title={Increasing software security through open source or closed source development? Empirics suggest that we have asked the wrong question}, booktitle={43rd Annual Hawaii International Conference on System Sciences}, author={Schryen, Guido and Eliot, Rich}, year={2010} }
Schryen, Guido, and Rich Eliot. “Increasing Software Security through Open Source or Closed Source Development? Empirics Suggest That We Have Asked the Wrong Question.” In 43rd Annual Hawaii International Conference on System Sciences, 2010.
G. Schryen and R. Eliot, “Increasing software security through open source or closed source development? Empirics suggest that we have asked the wrong question,” in 43rd Annual Hawaii International Conference on System Sciences, 2010.
Schryen, Guido, and Rich Eliot. “Increasing Software Security through Open Source or Closed Source Development? Empirics Suggest That We Have Asked the Wrong Question.” 43rd Annual Hawaii International Conference on System Sciences, 2010.
Main File(s)
Access Level
OA Open Access
Last Uploaded
2018-12-13T15:20:23Z


Export

Marked Publications

Open Data LibreCat

Search this title in

Google Scholar