3 ms·
Has there been any study of the effectiveness of code audits? Sensitivity and specificity in trying to find security problems, unintentional or intentional.
by colonwqbang 4y ago
Has there been any study of the effectiveness of code audits? Sensitivity and specificity in trying to find security problems, unintentional or intentional.
- hampereddustbin 4y agoIt's a question of whether you can have a process which can reliably detect if an arbitrary program will do X, and the answer is proved to be no: https://en.wikipedia.org/wiki/Halting_problem https://en.wikipedia.org/wiki/Halting_problem In real life however we have to accept imperfections, in which good-enough is often better than not at all