Vulnerability Webs: Systemic Risk in Software Networks
Fuente:
arXiv
Guardado en:
| Autores principales: | , , , |
|---|---|
| Formato: | Preprint |
| Publicado: |
2024
|
| Materias: | |
| Acceso en línea: | |
| Etiquetas: |
Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
|
| _version_ | 1866908429047562240 |
|---|---|
| author | Fritz, Cornelius Georg, Co-Pierre Mele, Angelo Schweinberger, Michael |
| author_facet | Fritz, Cornelius Georg, Co-Pierre Mele, Angelo Schweinberger, Michael |
| contents | Software development relies on code reuse to minimize costs, creating vulnerability risks through dependencies with substantial economic impact, as seen in the Crowdstrike and HeartBleed incidents. We analyze 52,897 dependencies across 16,102 Python repositories using a strategic network formation model incorporating observable and unobservable heterogeneity. Through variational approximation of conditional distributions, we demonstrate that dependency creation generates negative externalities. Vulnerability propagation, modeled as a contagion process, shows that popular protection heuristics are ineffective. AI-assisted coding, on the other hand, offers an effective alternative by enabling dependency replacement with in-house code. |
| format | Preprint |
| id |
arxiv_https___arxiv_org_abs_2402_13375 |
| institution | arXiv |
| publishDate | 2024 |
| record_format | arxiv |
| spellingShingle | Vulnerability Webs: Systemic Risk in Software Networks Fritz, Cornelius Georg, Co-Pierre Mele, Angelo Schweinberger, Michael Econometrics Software development relies on code reuse to minimize costs, creating vulnerability risks through dependencies with substantial economic impact, as seen in the Crowdstrike and HeartBleed incidents. We analyze 52,897 dependencies across 16,102 Python repositories using a strategic network formation model incorporating observable and unobservable heterogeneity. Through variational approximation of conditional distributions, we demonstrate that dependency creation generates negative externalities. Vulnerability propagation, modeled as a contagion process, shows that popular protection heuristics are ineffective. AI-assisted coding, on the other hand, offers an effective alternative by enabling dependency replacement with in-house code. |
| title | Vulnerability Webs: Systemic Risk in Software Networks |
| topic | Econometrics |
| url | https://arxiv.org/abs/2402.13375 |