What is it about?
The timely application of security patches to the identified vulnerabilities is critically important to avoid security attacks. Our grounded theory study explains why/how a majority of the patching delays emerge from socio-technical aspects such as ineffective coordination and what can be done for addressing the causes of such delays.
Featured Image
Photo by Lewis Kang'ethe Ngugi on Unsplash
Why is it important?
The paper provides the grounded evidence that the role of coordination represents a core concern to achieve success in patching and highlights the need to have a delicate balance between the socio-technical concerns such as coordination and automation.
Perspectives
In this paper, we present the first, to the best of our knowledge, Grounded Theory study exploring the role of coordination in security patch management based on a longitudinal study. This study provides potentially useful insights for researchers and practitioners who can carefully consider the needs of and devise suitable solutions for supporting the coordination of interdependencies involved in the timely and critical topic of security patch management.
Nesara Dissanayake
University of Adelaide
Read the Original
This page is a summary of: A grounded theory of the role of coordination in software security patch management, August 2021, ACM (Association for Computing Machinery),
DOI: 10.1145/3468264.3468595.
You can read the full text:
Contributors
The following have contributed to this page
