资源描述：
《Defensics Overview and Appendix - Customer Facing - 2015-11-09》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。
1、DefensicsManagingtheInfiniteSpaceProblemOctober19,2015©2015Synopsys,Inc.190%ofallreportedsecurityincidentsresultfromexploitsagainstdefectsinsoftware.©2015Synopsys,Inc.2TimeBetweenInitialCompromise&DiscoverySecondsMinutesHoursDaysWeeksMonthsYears0%0%0%27%24%39%9%©2015Synopsys,Inc.4100%TimetoCompr
2、omiseTheproportionofbreachesdiscovered75%fallswellbelowthatoftimetocompromise.Thetwolineshavedivergedoverthelastdecade,indicatinga50%67%55%55%61%67%62%67%89%62%77%45%growing“detectiondeficit”betweenattacksanddefenders.Withmoreattackersand%WHERE“DAYSORLESS”moretoattack,reactive25%TimetoDiscoverse
3、curityisgrowinglargelyineffective.0%200420062008201020122014©2015Synopsys,Inc.5“Adollarspentonpreventionisworthamilliondollarsonpost-breachincidentresponse-ANUPGHOSH,CEOATINVINCEA,INC”©2015Synopsys,Inc.7SDLRelativeCostsofRemediatingSecurityVulnerabilitiesCODING/DEVELOPMENTTESTRELEASE/MAINTENANCE
4、10x–15xCOST5x–7x1xTIME©2015Synopsys,Inc.8Itallstartswithabug.©2015Synopsys,Inc.9WhatisaBug?DEVELOPERSMAKEMISTAKESDeveloperswritecodetocreatesoftwareand,sometimes,theymakemistakes.Mistakesinthesourcecodeofsoftwareiscalledabug.©2015Synopsys,Inc.10TheCIATriadCONFIDENTIALITYINTEGRITYMeasuresundertak
5、entoensureconfidentialityConsistency,accuracy,andtrustworthinessofaredesignedtopreventsensitiveinformationdataoveritsentirelifecycle.Datamustnotfromreachingthewrongpeople,whilemakingchangeintransit,andstepstakentoensurethatsuretherightpeoplecaninfactgetit.datacannotbealteredbyunauthorizedpeopleA
6、VAILABILITYRigorouslymaintainingallhardware,performinghardwarerepairsimmediatelywhenneededandmaintainingacorrectlyfunctioningoperatingsystemenvironmentthatisfreeofsoftwareconflicts©2015Synopsys,Inc.11TheCIATriadCONFIDENTIALITYINTEGRITYCanthebugleadtotheftofinformation?Canthebugallowman-in-the-mi
7、ddleattacks,wherebydataismanipulatedduringoraftersubmission?AVAILABILITYWillthebugcauseadenialofserviceorcrashthatcouldimpacttheavailabilityofasystem?©2015Synopsys,Inc.12IMPACTOFALLCVEs100%50%nonenonenonepartialpartialpartia
