Communications of the ACM · 2011 · 54 citations · 15 references
ComputingComputer ScienceCybersecurityComputer SecuritySecure Software DevelopmentSoftware EngineeringOpen DataOperating System VulnerabilitiesPatch AnalysisPatch ManagementSoftware Security EngineeringSoftware Vulnerability DiscoveryOpen Source Security PolicyOpen Source Software SecurityPatch ValidationSecure Software PatchingSecurity Patch Evaluation
What does vulnerability and patch data say?
15
Why information security is hard - an economic perspective
Ross Anderson · 2005 · 825 citations
Predicting vulnerable software components
Stephan Neuhaus, Thomas Zimmermann, Christian Holler et al. · 2007 · 420 citations
Is finding security holes a good idea?
Eric Rescorla · IEEE Security & Privacy · 2005 · 272 citations
Windows of vulnerability: a case study analysis
John McHugh, William Fithen, William A. Arbaugh · Computer · 2000 · 263 citations