"COTS applications are much more easily available in the black hat community. Information such as vulnerabilities and various attack patterns are freely discussed and plotted to someone’s gain, which is a huge security risk for customers of the product."
https://www.infosectrain.com/blog/security-in-cots-software-in-sdlc/
On the other hand, you don't always know how securely COTS products were developed or whether the vendor would use its flaws against you. There’s also the question of what happens when the vendor discontinues updates and support. For these reasons, you must evaluate COTS vendors as a supply chain security issue.
From CISSP student guide 6th edition: "...COTS software can mean that security is too generic or just simply doesn't exist". bdw, I think it's the best book to study but very difficult to get it.
upvoted 3 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
CuteRabbit168
Highly Voted 2 years, 1 month agojackdryan
1 year, 6 months agoklarak
Most Recent 6 months, 3 weeks agoDelab202
1 year, 11 months agofranbarpro
2 years, 1 month agokrassko
2 years, 2 months ago