Title :
Security and source code access: issues and realities
Author :
Lipner, Steven B.
Author_Institution :
Microsoft Corp., Redmond, WA, USA
Abstract :
This paper addresses some of the benefits and drawbacks for security of open access to source code. After a discussion of alternative models for open access to source code, the paper reviews the positive and negative implications of each for system security. The paper concludes that source code review can have real benefits for security, but that those benefits are not realized automatically, and that some source code access models introduce significant drawbacks
Keywords :
computer software; security of data; source code open access; source code review; system security; Access protocols; Costs; Cryptographic protocols; Cryptography; Data security; Electrical capacitance tomography; Electronic switching systems; Explosions; Information security; Standards organizations;
Conference_Titel :
Security and Privacy, 2000. S&P 2000. Proceedings. 2000 IEEE Symposium on
Conference_Location :
Berkeley, CA
Print_ISBN :
0-7695-0665-8
DOI :
10.1109/SECPRI.2000.848476