Can I read Observation of recent Microsoft Zero-Day vulnerabilities on EtoBox?

Observation of recent Microsoft Zero-Day vulnerabilities by Evans, Nathaniel ;Yuan, Xiaohong is a scholarly article available to read on EtoBox.

What is Observation of recent Microsoft Zero-Day vulnerabilities about?

Zero-Day vulnerabilities are an intriguing and ever increasing problem. Microsoft has been one of the more exploited companies having Zero-Day vulnerabilities. This paper intends to identify some relationships within the Zero-Day vulnerabilities identified in nineteen news articles from 2010. We tried to collect data on vulnerability report date, attack report date, vulnerability patch date, vulnerability life cycle category, exploit implemented, Microsoft product affected, and affected functionality. Based on these data, we analyzed the duration between vulnerability notification date and attack date, the distribution of different vulnerability life cycle categories, the most common Microsoft product affected, and the most common exploitation technique used. Our data shows that Potential for Attacks is the most common vulnerability life cycle category, Windows XP SP3 is the most affected system, and the most common exploitation technique is by using malicious code without user input.

Author

Evans, Nathaniel ;Yuan, Xiaohong

Publisher

ACM Press

Published

2011

Language

EN