Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Avoiding Catastrophes in Cyberspace through Smarter Testing: How to prevent Heartbleed-like disasters using readily available testing technologies

Published

Author(s)

Apostol T. Vassilev, Christopher Celi

Abstract

The recently discovered Heartbleed bug in OpenSSL’s implementation of Internet security protocols and the aftermath from dealing with its consequences highlights a critical problem in the software industry. Software is routinely, inadequately tested leading to devastating security holes with far reaching consequences for ordinary people and service providers on the Internet. We show that readily available testing technologies can be employed to improve the scope and depth of software testing. This, combined with government and industry emerging standards and recommendations, could change the incentives for technology companies to respond to the increasing societal demands for security on the Internet.
Citation
Computer (IEEE Computer)
Volume
47
Issue
10

Keywords

software testing

Citation

Vassilev, A. and Celi, C. (2014), Avoiding Catastrophes in Cyberspace through Smarter Testing: How to prevent Heartbleed-like disasters using readily available testing technologies, Computer (IEEE Computer), [online], https://doi.org/10.1109/MC.2014.273 (Accessed December 26, 2024)

Issues

If you have any questions about this publication or are having problems accessing it, please contact reflib@nist.gov.

Created October 16, 2014, Updated November 10, 2018