Jump to content

Vulnerability Discovery Model

From Wikipedia, the free encyclopedia
This is an old revision of this page, as edited by Erik9bot (talk | contribs) at 21:19, 13 June 2009 (add template:uncategorized). The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

Vulnerability Discovery Model (VDM) is used to estimate future vulnerability discovery process/trend.
There are several VDMs:

  • Alhazmi-Malaiya: Time based model (Alhazmi-Malaiya Logistic (AML) model) [1]
  • Alhazmi-Malaiya: Effort based model[2]
  • Rescorla: Quadratic Model and Exponential Model [3]
  • Anderson: Thermodynamic Model [4]
  • Kim: Weibull Model [5]
  • Linear Model
   
  1. ^ O. H. Alhazmi and Y. K. Malaiya, “Quantitative vulnerability assessment of systems software,” in Proc. Annual Reliability and Maintainability Symposium, January 2005, pp. 615–620.
  2. ^ O. H. Alhazmi and Y. K. Malaiya, “Quantitative vulnerability assessment of systems software,” in Proc. Annual Reliability and Maintainability Symposium, January 2005, pp. 615–620.
  3. ^ E. Rescola, “Is finding security holes a good idea?,” Security and Privacy, pp. 14–19, Jan./Feb. 2005.
  4. ^ R. J. Anderson, “Security in open versus closed systems—The dance of Boltzmann, Coase and Moore,” in Open Source Software: Economics, Law and Policy. Toulouse, France: , June 20–21, 2002.
  5. ^ HyunChul Joh, Jinyoo Kim, Yashwant K. Malaiya, "Vulnerability Discovery Modeling Using Weibull Distribution," issre, pp.299-300, 2008 19th International Symposium on Software Reliability Engineering, 2008.