Title : 
Susceptibility matrix: a new aid to software auditing
         
        
            Author : 
Jiwnani, Kanta ; Zelkowitz, Marvin
         
        
            Author_Institution : 
Maryland Univ., College Park, MD, USA
         
        
        
        
        
        
        
            Abstract : 
Testing for security is lengthy, complex, and costly, so focusing test efforts in areas that have the greatest number of security vulnerabilities is essential. This article describes a taxonomy-based approach that gives an insight into the distribution of vulnerabilities in a system.
         
        
            Keywords : 
auditing; program testing; security of data; security testing; security vulnerabilities; software auditing; susceptibility matrix; taxonomy-based approach; Bars; Computer errors; Computer science; Computer security; Information security; Operating systems; Privacy; Software systems; Software testing; Taxonomy;
         
        
        
            Journal_Title : 
Security & Privacy, IEEE
         
        
        
        
        
            DOI : 
10.1109/MSECP.2004.1281240