On the public citation graph

A large scale exploratory analysis of software vulnerability life cycles

https://doi.org/10.5555/2337223.2337314
0 signed · 120 inferred · view as graph

Inferred edges come from two machine sources: sweeps of open repository metadata (mostly SSRN and Zenodo), and a bulk OpenAlex citation snapshot. Every row below is labelled with the one it came from. Neither is a complete citation index — absence here is not evidence of absence.

Is this your work? Sign in with ORCID and put your name on the claims that are yours.
Claim with ORCID
Reference health. See whether every reference in this work resolves to a known work and none has been retracted — and get a dated CiteStamped badge you can embed.
See reference health

What this work says

Outgoing claims: the papers this work cites, builds on, or argues with.

inferredcites →https://doi.org/10.1016/j.infoecopol.2009.10.002openalex-snapshot
Competition and patching of security vulnerabilities: An empirical analysis
inferredcites →https://doi.org/10.1109/acsac.2001.991552openalex-snapshot
Why information security is hard - an economic perspective
inferredcites →https://doi.org/10.1109/esem.2009.5315969openalex-snapshot
Vulnerability analysis for a quantitative security evaluation
inferredcites →https://doi.org/10.1109/imf.2009.15openalex-snapshot
A Comprehensive and Comparative Analysis of the Patching Behavior of Open Source and Closed Source Software Vendors
inferredcites →https://doi.org/10.1109/msp.2005.17openalex-snapshot
Is finding security holes a good idea?
inferredcites →https://doi.org/10.1109/rams.2005.1408432openalex-snapshot
Quantitative vulnerability assessment of systems software
inferredcites →https://doi.org/10.1109/tse.2007.70712openalex-snapshot
An Empirical Analysis of the Impact of Software Vulnerability Announcements on Firm Stock Price
inferredcites →https://doi.org/10.1111/1467-9868.00293openalex-snapshot
Estimating the Number of Clusters in a Data Set Via the Gap Statistic
inferredcites →https://doi.org/10.1145/1162666.1162671openalex-snapshot
Large-scale vulnerability analysis
inferredcites →https://doi.org/10.1145/1835804.1835821openalex-snapshot
Beyond heuristics
inferredcites →https://doi.org/10.1145/1920261.1920299openalex-snapshot
Familiarity breeds contempt
inferredcites →https://doi.org/10.1145/1985793.1985960openalex-snapshot
Empirical results on the study of software vulnerabilities (NIER track)
inferredcites →https://doi.org/10.1287/isre.1080.0226openalex-snapshot
An Empirical Analysis of Software Vendors' Patch Release Behavior: Impact of Vulnerability Disclosure

What points at this work

Incoming claims: where this work appears in other papers’ reference lists and arguments.

inferred← citeshttps://doi.org/10.2139/ssrn.4593629openalex-extracted
inferred← citeshttps://doi.org/10.48550/arxiv.1301.1275openalex-extracted
My Software has a Vulnerability, should I worry?
inferred← citeshttps://doi.org/10.5281/zenodo.2659797openalex-extracted
inferred← citeshttps://doi.org/10.1002/int.22752openalex-snapshot
Focus : Function clone identification on cross‐platform
inferred← citeshttps://doi.org/10.1007/978-3-030-03673-7_6openalex-snapshot
HAVOSS: A Maturity Model for Handling Vulnerabilities in Third Party OSS Components
inferred← citeshttps://doi.org/10.1007/978-3-030-58811-3_72openalex-snapshot
A Data-Mining Based Study of Security Vulnerability Types and Their Mitigation in Different Languages
inferred← citeshttps://doi.org/10.1007/978-3-030-58951-6_11openalex-snapshot
Follow the Blue Bird: A Study on Threat Data Published on Twitter
inferred← citeshttps://doi.org/10.1007/978-3-030-58951-6_13openalex-snapshot
Understanding the Security Risks of Docker Hub
inferred← citeshttps://doi.org/10.1007/978-3-030-68887-5_2openalex-snapshot
Measuring and Modeling Software Vulnerability Security Advisory Platforms
inferred← citeshttps://doi.org/10.1007/978-3-030-72582-2_5openalex-snapshot
Our (in)Secure Web: Understanding Update Behavior of Websites and Its Impact on Security
inferred← citeshttps://doi.org/10.1007/978-3-319-14039-1_13openalex-snapshot
Understanding the Vulnerability Lifecycle for Risk Assessment and Defense Against Sophisticated Cyber Attacks
inferred← citeshttps://doi.org/10.1007/978-3-319-15618-7_11openalex-snapshot
The Heavy Tails of Vulnerability Exploitation
inferred← citeshttps://doi.org/10.1007/978-3-319-23829-6_46openalex-snapshot
Characterizing Google Hacking: A First Large-Scale Quantitative Study
inferred← citeshttps://doi.org/10.1007/978-3-319-39564-7_20openalex-snapshot
Software Vulnerability Life Cycles and the Age of Software Products: An Empirical Assertion with Operating System Products
inferred← citeshttps://doi.org/10.1007/978-3-319-45741-3_9openalex-snapshot
Banishing Misaligned Incentives for Validating Reports in Bug-Bounty Platforms
inferred← citeshttps://doi.org/10.1007/978-3-319-54328-4_9openalex-snapshot
Patch Me If You Can: A Study on the Effects of Individual User Behavior on the End-Host Vulnerability State
inferred← citeshttps://doi.org/10.1007/978-3-319-65482-9_21openalex-snapshot
Optimally Selecting the Timing of Zero-Day Attack via Spatial Evolutionary Game
inferred← citeshttps://doi.org/10.1007/978-3-319-92624-7_1openalex-snapshot
Review into State of the Art of Vulnerability Assessment using Artificial Intelligence
inferred← citeshttps://doi.org/10.1007/978-3-662-44788-8_19openalex-snapshot
An Efficient Framework for Evaluating the Risk of Zero-Day Vulnerabilities
inferred← citeshttps://doi.org/10.1007/978-3-662-58387-6_8openalex-snapshot
The Rules of Engagement for Bug Bounty Programs
inferred← citeshttps://doi.org/10.1007/s00607-018-0663-0openalex-snapshot
Cluster-based vulnerability assessment of operating systems and web browsers
inferred← citeshttps://doi.org/10.1007/s10664-015-9403-7openalex-snapshot
Game of detections: how are security vulnerabilities discovered in the wild?
inferred← citeshttps://doi.org/10.1007/s10664-021-09959-3openalex-snapshot
Out of sight, out of mind? How vulnerable dependencies affect open-source projects
inferred← citeshttps://doi.org/10.1007/s11390-020-0525-zopenalex-snapshot
Automatic Buffer Overflow Warning Validation
inferred← citeshttps://doi.org/10.1007/s11416-014-0217-8openalex-snapshot
Longitudinal analysis of a large corpus of cyber threat descriptions
inferred← citeshttps://doi.org/10.1016/j.dss.2021.113586openalex-snapshot
Vulnerability disclosure mechanisms: A synthesis and framework for market-based and non-market-based disclosures
inferred← citeshttps://doi.org/10.1016/j.infsof.2014.07.001openalex-snapshot
A Bayesian network model for likelihood estimations of acquirement of critical software vulnerabilities and exploits
inferred← citeshttps://doi.org/10.1016/j.jnca.2021.103210openalex-snapshot
A selective ensemble model for cognitive cybersecurity analysis
inferred← citeshttps://doi.org/10.1016/j.procs.2018.04.274openalex-snapshot
Research of Complete Information Static Game Model for Software Manufacturer, White Hats and Black Hats
inferred← citeshttps://doi.org/10.1073/pnas.1322638111openalex-snapshot
Timing of cyber conflict
inferred← citeshttps://doi.org/10.1109/badgers.2014.8openalex-snapshot
The Vulnerability Dataset of a Large Software Ecosystem
inferred← citeshttps://doi.org/10.1109/ccc.2016.10openalex-snapshot
Exploiting Vulnerability Disclosures: Statistical Framework and Case Study
inferred← citeshttps://doi.org/10.1109/cns48642.2020.9162309openalex-snapshot
A Machine Learning-based Approach for Automated Vulnerability Remediation Analysis
inferred← citeshttps://doi.org/10.1109/dsn-s52858.2021.00011openalex-snapshot
Cleaning the NVD: Comprehensive Quality Assessment, Improvements, and Analyses
inferred← citeshttps://doi.org/10.1109/edcc.2017.27openalex-snapshot
Cluster-Based Vulnerability Assessment Applied to Operating Systems
inferred← citeshttps://doi.org/10.1109/fas-w.2018.00014openalex-snapshot
Reactive and Adaptive Security Monitoring in Cloud Computing
inferred← citeshttps://doi.org/10.1109/icdabi51230.2020.9325628openalex-snapshot
Analysis of software vulnerabilities using Exploratory Data Analysis (EDA)
inferred← citeshttps://doi.org/10.1109/icst.2019.00017openalex-snapshot
Fixing of Security Vulnerabilities in Open Source Projects: A Case Study of Apache HTTP Server and Apache Tomcat
inferred← citeshttps://doi.org/10.1109/icst49551.2021.00051openalex-snapshot
Applicable Micropatches and Where to Find Them: Finding and Applying New Security Hot Fixes to Old Software
inferred← citeshttps://doi.org/10.1109/incos.2016.36openalex-snapshot
A Novel Secure Architecture for the Internet of Things
inferred← citeshttps://doi.org/10.1109/issre.2017.20openalex-snapshot
Experience Report: Study of Vulnerabilities of Enterprise Operating Systems
inferred← citeshttps://doi.org/10.1109/issre52982.2021.00061openalex-snapshot
Characterizing and Understanding Software Developer Networks in Security Development
inferred← citeshttps://doi.org/10.1109/mobserv.2015.34openalex-snapshot
An Empirical Analysis of Contemporary Android Mobile Vulnerability Market
inferred← citeshttps://doi.org/10.1109/msp.2015.137openalex-snapshot
Mitigating Risk with Cyberinsurance
inferred← citeshttps://doi.org/10.1109/msr52588.2021.00026openalex-snapshot
An Empirical Study of OSS-Fuzz Bugs
inferred← citeshttps://doi.org/10.1109/percomw.2016.7457163openalex-snapshot
Invisible and forgotten: Zero-day blooms in the IoT
inferred← citeshttps://doi.org/10.1109/seaa.2019.00014openalex-snapshot
A Taxonomy for Improving Industry-Academia Communication in IoT Vulnerability Management
inferred← citeshttps://doi.org/10.1109/sp.2015.48openalex-snapshot
The Attack of the Clones: A Study of the Impact of Shared Code on Vulnerability Patching
inferred← citeshttps://doi.org/10.1109/sp.2016.43openalex-snapshot
Talos: Neutralizing Vulnerabilities with Security Workarounds for Rapid Response
inferred← citeshttps://doi.org/10.1109/spw.2013.16openalex-snapshot
Quantitative Assessment of Risk Reduction with Cybercrime Black Market Monitoring
inferred← citeshttps://doi.org/10.1109/srds.2012.4openalex-snapshot
Aggregating CVSS Base Scores for Semantics-Rich Network Security Metrics
inferred← citeshttps://doi.org/10.1109/srds.2013.30openalex-snapshot
A Unified Framework for Measuring a Network's Mean Time-to-Compromise
inferred← citeshttps://doi.org/10.1109/tbdata.2017.2723570openalex-snapshot
Big Data for Cybersecurity: Vulnerability Disclosure Trends and Dependencies
inferred← citeshttps://doi.org/10.1109/tdsc.2013.24openalex-snapshot
k-Zero Day Safety: A Network Security Metric for Measuring the Risk of Unknown Vulnerabilities
inferred← citeshttps://doi.org/10.1109/tdsc.2017.2665620openalex-snapshot
Defending Against Web Application Attacks: Approaches, Challenges and Implications
inferred← citeshttps://doi.org/10.1109/tnsm.2021.3078727openalex-snapshot
On the Flow of Software Security Advisories
inferred← citeshttps://doi.org/10.1109/tr.2019.2897248openalex-snapshot
From Analyzing Operating System Vulnerabilities to Designing Multiversion Intrusion-Tolerant Architectures
inferred← citeshttps://doi.org/10.1109/trustcom50675.2020.00160openalex-snapshot
SCAFFISD: A Scalable Framework for Fine-Grained Identification and Security Detection of Wireless Routers
inferred← citeshttps://doi.org/10.1109/tsc.2016.2646687openalex-snapshot
Shifting to Mobile: Network-Based Empirical Study of Mobile Vulnerability Market
inferred← citeshttps://doi.org/10.1111/deci.12212openalex-snapshot
Managing Enterprise Risks of Technological Systems: An Exploratory Empirical Analysis of Vulnerability Characteristics as Drivers of Exploit Publication*
inferred← citeshttps://doi.org/10.1145/2382196.2382284openalex-snapshot
Before we knew it
inferred← citeshttps://doi.org/10.1145/2382416.2382427openalex-snapshot
A preliminary analysis of vulnerability scores for attacks in wild
inferred← citeshttps://doi.org/10.1145/2630069openalex-snapshot
Comparing Vulnerability Severity and Exploits Using Case-Control Studies
inferred← citeshttps://doi.org/10.1145/2652524.2652533openalex-snapshot
Discovering buffer overflow vulnerabilities in the wild
inferred← citeshttps://doi.org/10.1145/2663887.2663906openalex-snapshot
An Exploratory Study of White Hat Behaviors in a Web Vulnerability Disclosure Program
inferred← citeshttps://doi.org/10.1145/2810103.2813704openalex-snapshot
An Empirical Study of Web Vulnerability Discovery Ecosystems
inferred← citeshttps://doi.org/10.1145/3078505.3078524openalex-snapshot
Characterizing and Modeling Patching Practices of Industrial Control Systems
inferred← citeshttps://doi.org/10.1145/3084455openalex-snapshot
Characterizing and Modeling Patching Practices of Industrial Control Systems
inferred← citeshttps://doi.org/10.1145/3124398openalex-snapshot
Strategic Aspects of Cyber Risk Information Sharing
inferred← citeshttps://doi.org/10.1145/3133956.3133960openalex-snapshot
Economic Factors of Vulnerability Trade and Exploitation
inferred← citeshttps://doi.org/10.1145/3133956.3134072openalex-snapshot
A Large-Scale Empirical Study of Security Patches
inferred← citeshttps://doi.org/10.1145/3203422.3203432openalex-snapshot
Security Vulnerability and Patch Management in Electric Utilities
inferred← citeshttps://doi.org/10.1145/3212480.3212486openalex-snapshot
Opinion
inferred← citeshttps://doi.org/10.1145/3243734.3243740openalex-snapshot
Asking for a Friend
inferred← citeshttps://doi.org/10.1145/3338906.3342489openalex-snapshot
Employing different program analysis methods to study bug evolution
inferred← citeshttps://doi.org/10.1145/3377811.3380923openalex-snapshot
A large-scale empirical study on vulnerability distribution within projects and the lessons learned
inferred← citeshttps://doi.org/10.1145/3379597.3387513openalex-snapshot
Exploring the Security Awareness of the Python and JavaScript Open Source Communities
inferred← citeshttps://doi.org/10.1145/3406112openalex-snapshot
The Tip of the Iceberg
inferred← citeshttps://doi.org/10.1145/3411495.3421360openalex-snapshot
The Sound of Silence
inferred← citeshttps://doi.org/10.1145/3444370.3444577openalex-snapshot
Network security assessment based on full host-based attack graph
inferred← citeshttps://doi.org/10.1145/3472811openalex-snapshot
Analyzing the Direct and Transitive Impact of Vulnerabilities onto Different Artifact Repositories
inferred← citeshttps://doi.org/10.1145/3475716.3475783openalex-snapshot
Who are Vulnerability Reporters?
inferred← citeshttps://doi.org/10.1145/3485447.3512236openalex-snapshot
Understanding the Practice of Security Patch Management across Multiple Branches in OSS Projects
inferred← citeshttps://doi.org/10.1145/3744916.3787836openalex-snapshot
Toward Efficient Package Maintenance: An Empirical Study of Patch Sharing across Four Linux Distributions
inferred← citeshttps://doi.org/10.11606/t.45.2016.tde-20230727-113548openalex-snapshot
Análise e extração de alertas antecipados sobre ameaças e incidentes de segurança em sistemas computacionais usando fontes de dados não estruturados
inferred← citeshttps://doi.org/10.1186/s13638-021-01978-4openalex-snapshot
WNV-Detector: automated and scalable detection of wireless network vulnerabilities
inferred← citeshttps://doi.org/10.14232/phd.10917openalex-snapshot
Applying Code Analysis and Machine Learning Techniques to Improve Compatibility and Security of Programs
inferred← citeshttps://doi.org/10.14257/ijgdc.2018.11.3.07openalex-snapshot
A Dynamically Linked Library Based Indirect Call Function Analysis for Detecting Banned API Usage in Binary Code
inferred← citeshttps://doi.org/10.14445/23488379/ijeee-v11i1p106openalex-snapshot
Automatic Software Vulnerability Classification Based on Improved Whale Optimization Algorithm and Attention Guided Deep Neural Network
inferred← citeshttps://doi.org/10.14722/ndss.2019.23522openalex-snapshot
Mind Your Own Business: A Longitudinal Study of Threats and Vulnerabilities in Enterprises
inferred← citeshttps://doi.org/10.14722/ndss.2021.24159openalex-snapshot
HERA: Hotpatching of Embedded Real-time Applications
inferred← citeshttps://doi.org/10.14763/2024.1.1740openalex-snapshot
Navigating vulnerability markets and bug bounty programs: A public policy perspective
inferred← citeshttps://doi.org/10.1587/transinf.2019icp0004openalex-snapshot
1-day, 2 Countries — A Study on Consumer IoT Device Vulnerability Disclosure and Patch Release in Japan and the United States
inferred← citeshttps://doi.org/10.17706//jsw.10.9.1079-1085openalex-snapshot
Memory Allocation Vulnerability Analysis and Analysis Optimization for C Programs Based on Formal Methods
inferred← citeshttps://doi.org/10.17762/ijritcc2321-8169.150286openalex-snapshot
Detection and Prevention of Unknown Vulnerabilities on Enterprise IP Networks
inferred← citeshttps://doi.org/10.20868/upm.thesis.40321openalex-snapshot
Defending against cybercrime: advances in the detection of malicious servers and the analysis of client-side vulnerabilities
inferred← citeshttps://doi.org/10.22215/etd/2017-11954openalex-snapshot
An investigation of software vulnerabilities in open source software projects using data from publicly-available online sources.
inferred← citeshttps://doi.org/10.23919/ifipnetworking.2017.8264865openalex-snapshot
A graph theoretic approach to fast and accurate malware detection
inferred← citeshttps://doi.org/10.23919/picmet.2018.8481833openalex-snapshot
Time to Discover and Fix Software Vulnerabilities in Open Source Software Projects: Notes on Measurement and Data Availability
inferred← citeshttps://doi.org/10.24251/hicss.2021.843openalex-snapshot
VULNERLIZER: Cross-analysis Between Vulnerabilities and Software Libraries
inferred← citeshttps://doi.org/10.25335/m55f50openalex-snapshot
Statistical and Learning Algorithms for the Design, Analysis, Measurement, and Modeling of Networking and Security Systems
inferred← citeshttps://doi.org/10.25335/m5kz00openalex-snapshot
Measurement and modeling of large scale networks
inferred← citeshttps://doi.org/10.32657/10356/173692openalex-snapshot
Scalable techniques for risk assessment of open-source libraries
inferred← citeshttps://doi.org/10.48550/arxiv.1905.09352openalex-snapshot
Hey Google, What Exactly Do Your Security Patches Tell Us? A Large-Scale Empirical Study on Android Patched Vulnerabilities
inferred← citeshttps://doi.org/10.48550/arxiv.2009.01694openalex-snapshot
The Sound of Silence: Mining Security Vulnerabilities from Secret Integration Channels in Open-Source Projects
inferred← citeshttps://doi.org/10.48550/arxiv.2012.08053openalex-snapshot
A Quantitative Study of Security Bug Fixes of GitHub Repositories
inferred← citeshttps://doi.org/10.48550/arxiv.2107.04940openalex-snapshot
You Really Shouldn't Roll Your Own Crypto: An Empirical Study of Vulnerabilities in Cryptographic Libraries
Editorial review for independent work. ICSAC — the Institute for Complexity Science and Advanced Computing — runs a structured editorial panel for researchers publishing outside journals, and publishes on CiteStamp rails. Submission is free and goes through ORCID: icsacinstitute.org/submit.