Why are simple applications more vulnerable than complex ones?

Black Duck's research reveals that simpler applications often present critical vulnerabilities, especially in sectors like finance, as organizations neglect their security.

The study found that smaller applications, which exhibit minimal interactivity, experience security flaws such as inadequate Transport Layer Protection more frequently than complex applications.

Examining over 1,300 applications, Black Duck discovered that 72 critical vulnerabilities in simple systems in education took an average of 342 days to resolve.

Misconfigurations and cryptographic flaws formed the bulk of security issues found in applications, reflecting persistent vulnerabilities in smaller systems compared to larger counterparts.

Read at Techzine Global