Abstract
COBOL-based legacy systems continue to underpin critical infrastructure in banking and government sectors despite their age and associated cybersecurity risks. Originally developed through a Department of Defense–sponsored initiative to standardize business computing, COBOL remains widely used in mission-critical environments. However, these systems face increasing vulnerabilities due to outdated security architectures, workforce shortages, and rising maintenance costs. This paper examines cybersecurity and operational challenges associated with COBOL systems and evaluates the Strangler Fig pattern as a modernization strategy that enables incremental replacement while maintaining continuity. The findings highlight implications for financial institutions and public-sector organizations dependent on legacy infrastructure.
DOI
https://doi.org/10.5038/2378-0789.9.1.1159
Recommended Citation
Caruso, Lauren E.; Vincent J. Compeau; and Assefaw H. Gebremedhin
(2026)
"Mitigating Common Vulnerabilities and Exposures in COBOL-Based Critical Systems Using the Strangler-Fig Pattern,"
Military Cyber Affairs: Vol. 9
:
Iss.
1
, Article 10.
https://doi.org/10.5038/2378-0789.9.1.1159
Available at:
https://digitalcommons.usf.edu/mca/vol9/iss1/10
Included in
Computer and Systems Architecture Commons, Computer Law Commons, Industrial Technology Commons, Management Information Systems Commons, Military, War, and Peace Commons, National Security Law Commons, Other Computer Engineering Commons, Other Operations Research, Systems Engineering and Industrial Engineering Commons, Strategic Management Policy Commons, Systems Science Commons
