Secure DoD software: Considerations for the Vulnerability Market

Authors

• Bradley C. Panton, USAF
• John M. Colombi, Air Force Institute of TechnologyFollow
• Michael R. Grimaila, Air Force Institute of TechnologyFollow
• Robert F. Mills, Air Force Institute of TechnologyFollow

Document Type

Article

Publication Date

11-2013

Abstract

Every year, the DoD upgrades their information technology systems, allows new applications to connect to the network, and reconfigures the Enterprise to gain efficiencies. While these actions are to better support the warfighter and satisfy national security interests, they introduce new system vulnerabilities waiting to be exploited. This article recommends the DoD enter the vulnerability marketplace to mitigate the risk of a cyber attack using these undiscovered vulnerabilities. Through use of the vulnerability market, DoD will ensure information security is built into the application, minimize the number of distributed patches, and optimize investment in defense programs.

Comments

The "Link to Full Text" on this page opens or downloads the full article as hosted at DTIC.

DOI

DTIC handle: ADA597613

Source Publication

CrossTalk: The Journal of Defense Software Engineering

Recommended Citation

Panton, B. C., Colombi, J. M., Grimaila, M. R., & Mills, R. F. (2013). Secure DoD software: Considerations for the vulnerability market. CrossTalk, 26(6), 18–21. https://apps.dtic.mil/sti/html/tr/ADA597613/index.html