Is Less Really More? Towards Better Metrics for Measuring Security Improvements Realized Through Software Debloating.
Michael D. BrownSantosh PandePublished in: CSET @ USENIX Security Symposium (2019)
Keyphrases
- software systems
- software quality
- security requirements
- security issues
- source code
- software development
- access control
- national institute of standards and technology
- security vulnerabilities
- software metrics
- security level
- enterprise systems
- statistical databases
- network security
- information security
- database systems
- software tools
- maintenance effort
- software engineering
- user friendliness
- intrusion detection
- security systems
- iso iec
- evaluation metrics
- test cases
- security properties
- security mechanisms
- security risks
- functional requirements
- software projects
- software design
- windows xp