Files
WebGoat/src/main/resources/lessons/vulnerablecomponents/documentation/VulnerableComponents_content4c.adoc
2022-07-31 22:39:21 +02:00

23 lines
850 B
Plaintext

== Architecture Information
=== What's important?
* Is my component old or is it stable
* Is my component unpopular
* Was my lack of upgrade a deliberate choice or a lack of knowledge
=== Summary
* It's really difficult to keep components up to date
For the components analyzed in 25,000 applications it was found that:
* 8% of 2 year old components did not have a newer version
* 23% of 11 year old components did not have a newer version
* Older components make up the majority of the risk
[cols="2a,2a"]
|===
| image::images/Old-Components.png[caption="Figure: ", title="Old Components", alt="Old Components", width="355", height="304", style="lesson-image"]
| image::images/Risk-of-Old-Components.png[caption="Figure: ", title="Risk of Old Components", alt="Risk of Old Components", width="355", height="304", style="lesson-image"]
|===