George Heuston wrote:
>Good feedback from Spaf. Thanks Folks! There were 172 of you at the
>presentation on Friday...
>
During the discussion following Spaf's talk, people asked that I post
some references.
* The paper on rates of exploitation vs. the date of disclosure of a
vulnerability: A Trend Analysis of Exploitations
<http://www.cs.umd.edu/%7Ewaa/pubs/CS-TR-4200.pdf> , Hilary
Browne, William A. Arbaugh, John McHugh, and William L. Fithen.
Proceedings of the 2001 IEEE Security and Privacy Conference, pp.
214 - 229, May 2001.
And I can't remember what the other thing was :) If someone reminds me
of the other thing I was supposed to dig up a reference for, I'll find
it and post it.
Crispin
--
Crispin Cowan, Ph.D.
Chief Scientist, WireX Communications, Inc. http://wirex.com
Security Hardened Linux Distribution: http://immunix.org
Available for purchase: http://wirex.com/Products/Immunix/purchase.html
This archive was generated by hypermail 2b30 : Sun May 26 2002 - 11:39:45 PDT