Download PDF (external access)

IEEE Software, Special Issue on Software Protection

Publication date: 2011-01-01
Volume: 28 Pages: 56 - 59
Publisher: Institute of Electrical and Electronics Engineers

Author:

Gu, Yuan
Wyseur, Brecht ; Preneel, Bart

Keywords:

Science & Technology, Technology, Computer Science, Software Engineering, Computer Science, 0803 Computer Software, 0806 Information Systems, 0906 Electrical and Electronic Engineering, Software Engineering, 4612 Software engineering

Abstract:

Security of application systems must be dynamically developed, deployed, maintained, and updated as companies rely on security technologies to protect their business model and assets. Adversaries can attack both hardware and software with a sufficient amount of time at their disposal. The emerging reality is that to protect content delivery systems effectively with software-mediated behavior, users must consider the entire security life cycle, not just initial attack resistance: their delivery systems must provide active prevention, monitoring, mitigation, and breach response for the duration of deployment. Longer-term response includes both ongoing renewal of diversity and device individualization as a proactive defense, thereby minimizing how many devices a particular breach affects and shoring up any new weak spots.