Patch Before Exploited: An Approach to Identify Targeted Software Vulnerabilities

AI in Cybersecurity - Intelligent Systems Reference Library ◽

10.1007/978-3-319-98842-9_4 ◽

2018 ◽

pp. 81-113 ◽

Cited By ~ 3

Author(s):

Mohammed Almukaynizi ◽

Eric Nunes ◽

Krishna Dharaiya ◽

Manoj Senguttuvan ◽

Jana Shakarian ◽

...

Keyword(s):

Software Vulnerabilities

Download Full-text

A Human Error Based Approach to Understanding Programmer-Induced Software Vulnerabilities

2020 IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) ◽

10.1109/issrew51248.2020.00036 ◽

2020 ◽

Author(s):

Vaibhav Anu ◽

Kazi Zakia Sultana ◽

Bharath K. Samanthula

Keyword(s):

Human Error ◽

Software Vulnerabilities

Download Full-text

Sifu - a cybersecurity awareness platform with challenge assessment and intelligent coach

Cybersecurity ◽

10.1186/s42400-020-00064-4 ◽

2020 ◽

Vol 3 (1) ◽

Author(s):

Tiago Espinha Gasiba ◽

Ulrike Lechner ◽

Maria Pinto-Albuquerque

Keyword(s):

Real Life ◽

Critical Infrastructures ◽

Automatic Assessment ◽

Software Developers ◽

Software Vulnerabilities ◽

Secure Coding ◽

Industrial Software ◽

Industrial Standards ◽

Coding Guidelines ◽

Industrial Context

AbstractSoftware vulnerabilities, when actively exploited by malicious parties, can lead to catastrophic consequences. Proper handling of software vulnerabilities is essential in the industrial context, particularly when the software is deployed in critical infrastructures. Therefore, several industrial standards mandate secure coding guidelines and industrial software developers’ training, as software quality is a significant contributor to secure software. CyberSecurity Challenges (CSC) form a method that combines serious game techniques with cybersecurity and secure coding guidelines to raise secure coding awareness of software developers in the industry. These cybersecurity awareness events have been used with success in industrial environments. However, until now, these coached events took place on-site. In the present work, we briefly introduce cybersecurity challenges and propose a novel platform that allows these events to take place online. The introduced cybersecurity awareness platform, which the authors call Sifu, performs automatic assessment of challenges in compliance to secure coding guidelines, and uses an artificial intelligence method to provide players with solution-guiding hints. Furthermore, due to its characteristics, the Sifu platform allows for remote (online) learning, in times of social distancing. The CyberSecurity Challenges events based on the Sifu platform were evaluated during four online real-life CSC events. We report on three surveys showing that the Sifu platform’s CSC events are adequate to raise industry software developers awareness on secure coding.

Download Full-text