Supporting software security by measuring, coordinating, and enforcing software trustworthiness

通过测量、协调和加强软件可信度来支持软件安全

• 批准号: 402445-2011
• 负责人: Locasto, Michael
• 金额: $ 2.48万
• 依托单位: University of Calgary
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2012
• 资助国家: 加拿大
• 起止时间: 2012-01-01 至 2013-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=508379
• 关键词: Supporting; software; security; measuring; coordinating

The public often has little guidance when selecting security software to defend their computers. What makes this problem so difficult is the lack of information on what specific parts of a computer system (and its software) various anti-virus, anti-spyware, and firewall software actually monitor and defend. Information security experts typically recommend multiple layers of defense (i.e., "defense-in-depth"), but there is little concrete evidence for judging what software to pick or determining the makeup of those layers.

公众在选择安全软件来保护他们的计算机时往往没有什么指导。 使这个问题如此困难的是缺乏关于计算机系统（及其软件）的哪些特定部分的信息，各种反病毒，反间谍软件和防火墙软件实际上监视和防御。 信息安全专家通常建议多层防御（即，“纵深防御”），但几乎没有具体的证据来判断选择什么软件或确定这些层的组成。