English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Context: Software security patch management purports to support the processof patching known software security vulnerabilities. Given the increasingrecognition of the importance of software security patch management, it isimportant and timely to systematically review and synthesise the relevantliterature on this topic.  Objective: This paper aims at systematically reviewing the state of the artof software security patch management to identify the socio-technicalchallenges in this regard, reported solutions (i.e., approaches, tools, andpractices), the rigour of the evaluation and the industrial relevance of thereported solutions, and to identify the gaps for future research.  Method: We conducted a systematic literature review of 72 studies publishedfrom 2002 to March 2020, with extended coverage until September 2020 throughforward snowballing.  Results: We identify 14 socio-technical challenges, 18 solution approaches,tools and practices mapped onto the software security patch management process.We provide a mapping between the solutions and challenges to enable a reader toobtain a holistic overview of the gap areas. The findings also reveal that only20.8% of the reported solutions have been rigorously evaluated in industrialsettings.  Conclusion: Our results reveal that 50% of the common challenges have notbeen directly addressed in the solutions and that most of them (38.9%) addressthe challenges in one phase of the process, namely vulnerability scanning,assessment and prioritisation. Based on the results that highlight theimportant concerns in software security patch management and the lack ofsolutions, we recommend a list of future research directions. This study alsoprovides useful insights about different opportunities for practitioners toadopt new solutions and understand the variations of their practical utility.

Software Security Patch Management -- A Systematic Literature Review of Challenges, Approaches, Tools and Practices