Just How Secure Are Security Products
Dan Geer
Abstract
Dan Geer
Abstract
It's obvious that customers buy security products to keep their computer systems safe from viruses, hackers, and other cyber dangers. It's thus also obvious why some users may be surprised to find that their security products can actually cause security problems. Several times recently, products such as firewalls, antispam software, and intrusion prevention and detection software from vendors such as Check Point Software Technologies, Symantec, and Zone labs (a Check Point company) have been found to have potentially dangerous flaws that could let hackers gain control of systems, disable computers, or cause other problems. Security vendors may try to improve engineering and debugging in an effort to address at least some of the problems that cause vulnerabilities in security products.
OpenAlex reports 14 citations for this work. Citation counts describe recorded attention and do not establish research quality.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
It's obvious that customers buy security products to keep their computer systems safe from viruses, hackers, and other cyber dangers. It's thus also obvious why some users may be surprised to find that their security products can actually cause security problems. Several times recently, products such as firewalls, antispam software, and intrusion prevention and detection software from vendors such as Check Point Software Technologies, Symantec, and Zone labs (a Check Point company) have been found to have potentially dangerous flaws that could let hackers gain control of systems, disable computers, or cause other problems. Security vendors may try to improve engineering and debugging in an effort to address at least some of the problems that cause vulnerabilities in security products.
Key concepts: Hacker, Computer security, Computer science, Security bug, Secure coding, Security through obscurity, Software security assurance, Security testing