| HAL-Inria | Publications, software ... of Inria's scientists |
Conference papers
Information Security and Open Source Dual Use Security Software: Trust Paradox
Abstract : Nmap, free open source utility for network exploration or security auditing, today counts for thirteen million lines of code representing four thousand years of programming effort. Hackers can use it to conduct illegal activities, and information security professionals can use it to safeguard their network. In this dual-use context, question of trust is raised. Can we trust programmers developing open source dual use security software? Motivated by this research question, we conducted interviews among hackers and information security professionals, and explored ohloh.net database. Our results show that contributors behind open source security software (OSSS) are hackers, OSSS have important dual-use dimension, information security professionals generally trust OSSS, and large organizations will avoid adopting and using OSSS.
Cited literature [37 references]
https://hal.inria.fr/hal-01467570
Contributor : Hal Ifip <>
Submitted on : Tuesday, February 14, 2017 - 3:28:16 PM
Last modification on : Tuesday, February 14, 2017 - 3:32:34 PM
Long-term archiving on: : Monday, May 15, 2017 - 3:17:47 PM
Contributor : Hal Ifip <>
Submitted on : Tuesday, February 14, 2017 - 3:28:16 PM
Last modification on : Tuesday, February 14, 2017 - 3:32:34 PM
Long-term archiving on: : Monday, May 15, 2017 - 3:17:47 PM
File
978-3-642-38928-3_14_Chapter.p...
Files produced by the author(s)
Licence
Distributed under a Creative Commons Attribution 4.0 International License