How to build a vulnerability benchmark to overcome cyber security attacks. (1st January 2020)

• Record Type: Journal Article
• Authors: Akram, Junaid; Ping, Luo
• Is Part Of: IET information security. Volume 14:Number 1(2020)
• Page Start: 60
• Page End: 71
• Publication Date: 2020-01-01
• Subjects: computer crime -- Internet -- source code (software); vulnerability benchmark -- cyber security attacks -- cybercrimes -- source code level -- vulnerability code -- security measures -- vulnerability data‐set -- zero‐day exploits -- code clone detection technique -- security attacks -- Internet; Computer security -- Periodicals; Cryptography -- Periodicals; Computer networks -- Security measures -- Periodicals; Database security -- Periodicals; 005.8
• DOI: 10.1049/iet-ifs.2018.5647
• Languages: English
• ISSNs: 1751-8709

Abstract

Abstract : Cybercrimes are on a dramatic rise worldwide. The crime rate is growing day by day in every field or department which is directly or indirectly connected to the internet including Government, business or any individual. The main objective of this study is to evaluate the vulnerabilities in different software systems at the source code level by tracing their patch files. The authors have collected the source code of different types of vulnerabilities at a different level of granularities. They have proposed different ways to collect or trace the vulnerability code, which can be very helpful for security experts, organisations and software developers to maintain security measures. By following their proposed method, you can build your own vulnerability data‐set and can detect vulnerabilities in any system by using suitable code clone detection technique. The study also includes a discussion of reasons for the rise in cybercrimes including zero‐day exploits. A case study has been discussed with results and research questions to show the effectiveness of this study. This study concludes with the effective key findings of published and non‐published vulnerabilities and the ways to prevent from different security attacks to overcome cybercrimes.