segunda-feira, 3 de novembro de 2008

Vulnerabilidades de segurança: mais
um caso de percepção vs. realidade

Nem me vou alongar muito sobre isto, até porque está tudo aqui. Mas tem a ver com segurança (ou a falta dela) em sistemas operativos e aplicações no primeiro semestre de 2008 e a punch line é esta:

  • The four vendors fixed a total 585 vulnerabilities in 1H08. 26.8% affected multiple vendors and of those, only 8 were fixed on the same day – the rest had an average 35 day delay between the first available fix and the last available fix..
  • Microsoft had the lowest average Days of Risk for all vulnerabilities fixed at 24.22 days, with the next closest vendor at 72 days.
  • For desktop OS vulnerabilities, Windows Vista had the fewest vulnerabilities in 1H08 at 21. The next lowest number was Windows XP SP2 at 26.
  • Windows Vista customers experienced full or partial mitigation for 46% of the 26 vulnerabilities affecting Windows XP SP2 in 1H08, but also experienced one additional vulnerability in new code.

Sem comentários: