EuroSec SQOOSS

Summary

With SQO-OSS in mind, we'll try and introduce some new metrics that will measure software vulnurabilities in Java.

Contribution

1. A fresh taxonomy of Java vulnerabilities (dimitro, circular).

• http://www.cigital.com/securitypack/view/index.html

• http://www.sei.cmu.edu/pub/documents/05.reports/pdf/05tn044.pdf

2. A mechanism to detect them (bkarak).

• A SQO-OSS plugin

3. Measurements (gousiosg).

Bibliography

EuroSec Bibliography