The DOI matches its Crossref record.
Software security
Abstract
Software security is the idea of engineering software so that it continues to function correctly under malicious attack. Most technologists acknowledge this undertaking's importance, but they need some help in understanding how to tackle it. The article aims to provide that help by exploring software security best practices. A central and critical aspect of the computer security problem is a software problem. Software defects with security ramifications, including implementation bugs such as buffer overflows and design flaws such as inconsistent error handling, promise to be with us for years. All too often, malicious intruders can hack into systems by exploiting software defects. Internet-enabled software applications present the most common security risk encountered today, with software's ever-expanding complexity and extensibility adding further fuel to the fire. By any measure, security holes in software are common, and the problem is growing.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cited by
Security issues in cloud environments: a survey
Fernandes, D. A. B., Soares, L. F. B., Gomes, J. V., Freire, M. M., & Inácio, P. R. M. (2014) · International Journal of Information Security · doi:10.1007/s10207-013-0208-7 · Cited by 494
A Survey of Vehicle to Everything (V2X) Testing
Wang, J., Shao, Y., Ge, Y., & Yu, R. (2019) · Sensors · doi:10.3390/s19020334 · Cited by 312
What Is the Cyber Offense-Defense Balance? Conceptions, Causes, and Assessment
Slayton, R. (2017) · International Security · doi:10.1162/isec_a_00267 · Cited by 224
Exploring software security approaches in software development lifecycle: A systematic mapping study
Mohammed, N. M., Niazi, M., Alshayeb, M., & Mahmood, S. (2017) · Computer Standards & Interfaces · doi:10.1016/j.csi.2016.10.001 · Cited by 104
Preliminary Findings about DevSecOps from Grey Literature
Mao, R., Zhang, H., Dai, Q., Huang, H., Rong, G., Shen, H., Chen, L., & Lu, K. (2020) · 2020 IEEE 20th International Conference on Software Quality, Reliability and Security (QRS) · doi:10.1109/qrs51102.2020.00064 · Cited by 49
Metadata
- Authors
- Mcgraw, G.
- Venue
- IEEE Security & Privacy Magazine
- Published
- 2004-03
- Volume
- 2
- Issue
- 2
- Pages
- 80-83
- ISSN
- 1540-7993 (ISSN-L)
- OpenAlex
- W2294407885
- Cited by
- 509
- References
- 0
- FWCI
- 17.62
- Type
- journal article
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Software security. https://app.cochat.ai/papers/10.1109/msecp.2004.1281254
- The paper
- Mcgraw, G. (2004). Software security. IEEE Security & Privacy Magazine. https://doi.org/10.1109/msecp.2004.1281254
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
