Security concern are different for any given application.
Some software publishers are concern with piracy of their application, in whole or in part. They want to sell their application to every user and not have it copied illegally and sold on the black market. To these publisher, security means keeping their binaries safe from illegal copying.
Some publishers present their software for free but only allow access to certain parts of the applications to registered users. These publishers are interested in ensuring that every user gets only the access they paid for and are thus concerned about access control.
They want everyone to have their software, but they want only authorized users to be able to access the part that they paid for.
Some publishers are concerned about their applications vulnerability to malicious input. publishers of server applications that listen to network ports or desktop applications that execute mobile code are particularly worried about buffer overruns and malicious use. These publishers are intent on ensuring that their applications cannot damage local resources or cause malicious code to execute.
Other software publishers are worried about the data that their software processes. The data must remain secret for all but authorized users. These publishers must worry about data being stored in plain text or data that has predictable pattern of residence in memory.
Their concern is to keep their data secret.
Indeed, there are many concern that software publishers have. Thus any bug that causes a CERT advisory or has the potential to cause harm must be considered a security vulnerability.
No comments:
Post a Comment