Now showing items 1-3 of 3

    • How and Why More Secure Technologies Succeed in Legacy Markets: Lessons from the Success of SSH 

      Rosasco, Nicholas; Larochelle, David (2003)
      Secure shell (SSH) can safely be called one of the rare successes in which a more secure technology has largely replaced a less secure but entrenched tool: telnet. We perform a market analysis to determine how and why SSH ...
    • Statically Detecting Likely Buffer Overflow Vulnerabilities 

      Larochelle, David; Evans, David (2001)
      Buffer overflow attacks may be today’s single most important security threat. This paper presents a new approach to mitigating buffer overflow vulnerabilities by detecting likely vulnerabilities through an analysis of the ...
    • Towards a Model of the Costs of Security 

      Larochelle, David; Rosasco, Nicholas (2003)
      We present a simple information security model to determine why, historically, the level of security has not increased despite numerous technical advances. In our model, the software design process involves trade-offs ...