一句话：提出以 JIT 补丁改善企业漏洞补丁管理与攻击修复的网络安全卫生方案。
论文关注企业漏洞补丁管理的困境：公司难以在网络中测试和部署新补丁，导致大量攻击向量暴露；企业服务器应用又会泄露安全态势信息，加速攻击者的侦察（如知识收集攻击）。现有补丁流程无法提供攻击者活动的洞察，且及时修复受补丁兼容性与部署周期制约。为此，作者提出通过 JIT patching（即时补丁）改善网络安全卫生，但摘要未展开具体技术机制、系统实现与评估结果。
Vulnerability patch management remains one of the most complex issues facing modern enterprises; companies struggle to test and deploy new patches across their networks, often leaving myriad attack vectors vulnerable to exploits. This problem is exacerbated by enterprise server applications, which expose tremendous amounts of information about their security postures, greatly expediting attackers' reconnaissance incursions (e.g., knowledge gathering attacks). Unfortunately, current patching processes offer no insights into attacker activities, and prompt attack remediation is hindered by patch compatibility considerations and deployment cycles.
DOI 原文 ·
@inproceedings{paperbot5822,
title = {Improving cybersecurity hygiene through JIT patching},
author = {Frederico Araujo and Teryl Taylor},
booktitle = {FSE},
year = {2020},
doi = {10.1145/3368089.3417056}
}