Zero-days last for years. Issue 3 (March 2017)

• Record Type: Journal Article
• Is Part Of: Network security. Volume 2017:Issue 3(2017:Mar.)
• Page Start: 2
• Publication Date: 2017-03
• Subjects: Computer security -- Periodicals; Computer networks -- Security measures -- Periodicals; Electronic data processing departments -- Security measures -- Periodicals; Computers -- Access control -- Periodicals; 005.805
• DOI: 10.1016/S1353-4858(17)30022-3
• Languages: English
• ISSNs: 1353-4858

Abstract

Abstract : A new study from the RAND Corporation, based on data about zero-day vulnerabilities, concludes that the average life expectancy for one of these bugs before it is publicly disclosed and patched is 6.9 years. Only a quarter of them survive for less than 18 months.