The Impact of a Major Security Event on an Open Source Project

2020/05/28 by James Walden · 1 voice · 4 citations
Computer Science · #Software Engineering Research #Software Reliability and Analysis Research #Software Engineering Techniques and Practices

paper · pdf · doi:10.1145/3379597.3387465

Abstract

Context: The Heartbleed vulnerability brought OpenSSL to international attention in 2014. The almost moribund project was a key security component in public web servers and over a billion mobile devices. This vulnerability led to new investments in OpenSSL.

Citations

• Letters to the editor: go to statement considered harmful

Cited by

• You Really Shouldn't Roll Your Own Crypto: An Empirical Study of Vulnerabilities in Cryptographic Libraries
• Exploring the Garden of Forking Paths in Empirical Software Engineering Research: A Multiverse Analysis
• Code Clone Detection via an AlphaFold-Inspired Framework
• Model Context Protocol (MCP) at First Glance: Studying the Security and Maintainability of MCP Servers

Discussions

• What changed in OpenSSL after heartbleed [hn, 158 points, 64 comments]

Related

• 2020 State of the Octoverse: Securing the World's Software
• On Categorizing Open Source Software Security Vulnerability Reporting Mechanisms on GitHub
• An Overview of Cyber Security Funding for Open Source Software
• Open Source Software Opportunities and Risks
• The most frequent programming mistakes that cause software vulnerabilities