diff --git a/src/site/markdown/index.md b/src/site/markdown/index.md index 72a7b2793..556fc3f11 100644 --- a/src/site/markdown/index.md +++ b/src/site/markdown/index.md @@ -7,7 +7,7 @@ dependent libraries) to identify known vulnerable components. The problem with using known vulnerable components was covered in a paper by Jeff Williams and Arshan Dabirsiaghi titled, "[The Unfortunate Reality of Insecure -Libraries](https://www.aspectsecurity.com/uploads/downloads/2012/03/Aspect-Security-The-Unfortunate-Reality-of-Insecure-Libraries.pdf)". +Libraries](http://www1.contrastsecurity.com/the-unfortunate-reality-of-insecure-libraries?&__hssc=92971330.1.1412763139545&__hstc=92971330.5d71a97ce2c038f53e4109bfd029b71e.1412763139545.1412763139545.1412763139545.1&hsCtaTracking=7bbb964b-eac1-454d-9d5b-cc1089659590%7C816e01cf-4d75-449a-8691-bd0c6f9946a5)" (registration required). The gist of the paper is that we as a development community include third party libraries in our applications that contain well known published vulnerabilities \(such as those at the [National Vulnerability Database](http://web.nvd.nist.gov/view/vuln/search)\).