Title :
Was the 2006 Debian SSL Debacle a system accident?
Author :
Markowsky, George
Author_Institution :
Univ. of Maine, Orono, ME, USA
Abstract :
In this paper we examine in detail the Debian OpenSSL Debacle from the perspectives of a system accident, a concept derived from the work of Charles Perrow [1]. This event left users of Debian and its derivatives with seriously compromised cryptographic capabilities. We identify some common failings that might be problematic in other software development projects and offers some suggestions to help develop code more securely.
Keywords :
cryptography; software engineering; Debian OpenSSL Debacle; cryptographic capabilities; software development projects; system accident perspective; Accidents; Cryptography; Entropy; Operating systems; Software systems; US Department of Defense; Debian; SSL; cryptography; security breach; software engineering; system accident;
Conference_Titel :
Intelligent Data Acquisition and Advanced Computing Systems (IDAACS), 2013 IEEE 7th International Conference on
Conference_Location :
Berlin
Print_ISBN :
978-1-4799-1426-5
DOI :
10.1109/IDAACS.2013.6663000
