human factors;
vulnerabilities;
patching;
time;
holidays;
D O I:
10.1016/j.cose.2005.09.007
中图分类号:
TP [自动化技术、计算机技术];
学科分类号:
0812 ;
摘要:
Social engineering attacks are well-known to prey on human weaknesses. Besides these weaknesses, humans insist on eating, steeping, and partaking in non-work activities. On a global scale, work schedules combined with IT policies leave large windows of vulnerability - but how large? We examine calendar data through the year 2010 and locate the longest vulnerability windows which could be exploited by well-timed attacks by malicious software. The same data can be analyzed to solve a related problem: determining the best times to release software patches. (C) 2005 Elsevier Ltd. All rights reserved.