Abstract
A Patch Management System (PMS) distributes and manages security patches for patch-server agents after collecting the patch files from software vendors. The PMS must account for the integrity and safety of the patch files to prevent huge damage arising from possible security incidents at the agents’ environment. As software vendors cannot consider the patch compatibility of all patch-agent environments, the cause of a compatibility conflict must be analyzed when a patch fails. Existing PMSs manually verify the integrity of the patch files in a test environment. This study presents a method to automate patch testing and application, while monitoring the file modification, and reduce the time needed to analyze compatibility conflicts by using the modified file information.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
References
Secunia: Secunia vulnerability review 2015, March 2015. https://secunia.com/?action=fetch&filename=secunia_vulnerability_review_2015_pdf.pdf
KISA: Major internet incidents of South Korea, October 2013. http://www.kisa.or.kr/uploadfile/201310/201310071957453995.pdf
Zhao, D., Furnell, S.M., Al-Ayed, A.: The research on a patch management system for enterprise vulnerability update. In: WASE International Conference on ICIE 2009, vol. 2, pp. 250–253 (2009)
NIST.SP.800-40r3: Guide to enterprise patch management technologies, July 2013. http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-40r3.pdf
W3C: Extensible Markup Language. http://www.w3.org/xml/
Eastlake III, D., Reagle, J., Solo, D.: (Extensible Markup Language) XML-signature syntax and processing, No. RFC 3275 (2002). https://www.rfc-editor.org/rfc/pdfrfc/rfc3275.txt.pdf
Acknowledgment
This work was supported by Institute for Information and communications Technology Promotion (IITP) grant funded by the Korea government (MSIP). (No. B0717-16-0099, IoT Security Vulnerabilities Search, Sharing and Testing Technology Development).
Author information
Authors and Affiliations
Corresponding author
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2017 Springer Nature Singapore Pte Ltd.
About this paper
Cite this paper
An, J., Jung, S., Won, Y. (2017). Study on Integrity Verification and Compatibility-Conflict Analysis for Safe Patching. In: Park, J., Chen, SC., Raymond Choo, KK. (eds) Advanced Multimedia and Ubiquitous Engineering. FutureTech MUE 2017 2017. Lecture Notes in Electrical Engineering, vol 448. Springer, Singapore. https://doi.org/10.1007/978-981-10-5041-1_32
Download citation
DOI: https://doi.org/10.1007/978-981-10-5041-1_32
Published:
Publisher Name: Springer, Singapore
Print ISBN: 978-981-10-5040-4
Online ISBN: 978-981-10-5041-1
eBook Packages: EngineeringEngineering (R0)