ABSTRACT

The chapter uses the term vulnerability in its technical, information security sense: a weakness that could lead to a security breach. Software vulnerabilities are weaknesses of the software, in fact defects, that hackers can exploit to gain unauthorized access. Software programs currently contain an unacceptable number of vulnerabilities. proper attention to software development leads to lower defect rates. Why is software so full of vulnerabilities? This chapter identifies four sources of vulnerabilities. Complexity, computing progress resulting in complex programs, discrete versus continuous mathematics, and consumer demand for insecure software. The chapter proposes changing the current consumer demand for insecure software into a demand for secure software.