{"id":"https://openalex.org/W4408564453","doi":"https://doi.org/10.1145/3724133","title":"A Novel Vulnerability Exploit Prediction System Using the Relational Vulnerability-Vendor Network","display_name":"A Novel Vulnerability Exploit Prediction System Using the Relational Vulnerability-Vendor Network","publication_year":2025,"publication_date":"2025-03-18","ids":{"openalex":"https://openalex.org/W4408564453","doi":"https://doi.org/10.1145/3724133"},"language":"en","primary_location":{"id":"doi:10.1145/3724133","doi":"https://doi.org/10.1145/3724133","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3724133","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1145/3724133","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5021974894","display_name":"Mahir Mahbub","orcid":"https://orcid.org/0000-0002-5364-0453","observed_orcids":["https://orcid.org/0000-0002-5364-0453"]},"institutions":[{"id":"https://openalex.org/I205746353","display_name":"University of Dhaka","ror":"https://ror.org/05wv2vq37","country_code":"BD","type":"education","lineage":["https://openalex.org/I205746353"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Mahir Mahbub","raw_affiliation_strings":["Department of Internet of Things and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Gazipur, Bangladesh and Institute of Information Technology, University of Dhaka, Dhaka, Bangladesh","Department of IoT and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Bangladesh and Institute of Information Technology, University of Dhaka, Bangladesh"],"raw_orcid":"https://orcid.org/0000-0002-5364-0453","affiliations":[{"raw_affiliation_string":"Department of Internet of Things and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Gazipur, Bangladesh and Institute of Information Technology, University of Dhaka, Dhaka, Bangladesh","institution_ids":["https://openalex.org/I205746353"]},{"raw_affiliation_string":"Department of IoT and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Bangladesh and Institute of Information Technology, University of Dhaka, Bangladesh","institution_ids":["https://openalex.org/I205746353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100915245","display_name":"Mohammed Shafiul Alam Khan","orcid":"https://orcid.org/0000-0002-8174-4639","observed_orcids":["https://orcid.org/0000-0002-8174-4639"]},"institutions":[{"id":"https://openalex.org/I205746353","display_name":"University of Dhaka","ror":"https://ror.org/05wv2vq37","country_code":"BD","type":"education","lineage":["https://openalex.org/I205746353"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Mohammed Shafiul Alam Khan","raw_affiliation_strings":["Institute of Information Technology, University of Dhaka, Dhaka, Bangladesh","Institute of Information Technology, University of Dhaka, Bangladesh"],"raw_orcid":"https://orcid.org/0000-0002-8174-4639","affiliations":[{"raw_affiliation_string":"Institute of Information Technology, University of Dhaka, Dhaka, Bangladesh","institution_ids":["https://openalex.org/I205746353"]},{"raw_affiliation_string":"Institute of Information Technology, University of Dhaka, Bangladesh","institution_ids":["https://openalex.org/I205746353"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038912365","display_name":"Thaier Hamid","orcid":"https://orcid.org/0009-0006-3379-5366","observed_orcids":["https://orcid.org/0009-0006-3379-5366"]},"institutions":[{"id":"https://openalex.org/I4402554155","display_name":"University of Frontier Technology, Bangladesh","ror":"https://ror.org/01fva0642","country_code":"BD","type":"education","lineage":["https://openalex.org/I4402554155"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Tasnima Hamid","raw_affiliation_strings":["Department of Internet of Things and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Gazipur, Bangladesh","Department of IoT and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Bangladesh"],"raw_orcid":"https://orcid.org/0009-0006-3379-5366","affiliations":[{"raw_affiliation_string":"Department of Internet of Things and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Gazipur, Bangladesh","institution_ids":["https://openalex.org/I4402554155"]},{"raw_affiliation_string":"Department of IoT and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Bangladesh","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5116677793","display_name":"Md. Shakil Mia","orcid":"https://orcid.org/0009-0001-2107-4848","observed_orcids":["https://orcid.org/0009-0001-2107-4848"]},"institutions":[{"id":"https://openalex.org/I4402554155","display_name":"University of Frontier Technology, Bangladesh","ror":"https://ror.org/01fva0642","country_code":"BD","type":"education","lineage":["https://openalex.org/I4402554155"]}],"countries":["BD"],"is_corresponding":false,"raw_author_name":"Md. Shakil Mia","raw_affiliation_strings":["Department of Internet of Things and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Gazipur, Bangladesh","Department of IoT and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Bangladesh"],"raw_orcid":"https://orcid.org/0009-0001-2107-4848","affiliations":[{"raw_affiliation_string":"Department of Internet of Things and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Gazipur, Bangladesh","institution_ids":["https://openalex.org/I4402554155"]},{"raw_affiliation_string":"Department of IoT and Robotics Engineering, Bangabandhu Sheikh Mujibur Rahman Digital University, Bangladesh","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.6605,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.97285068,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"6","issue":"2","first_page":"1","last_page":"17"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5199999809265137,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.5199999809265137,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.39430001378059387,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.03500000014901161,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability-prioritization","display_name":"vulnerability prioritization","score":0.9639999866485596},{"id":"https://openalex.org/keywords/electric-power-steering","display_name":"electric power steering","score":0.7149999737739563},{"id":"https://openalex.org/keywords/relational-graph-convolutional-network","display_name":"relational graph convolutional network","score":0.7429999709129333},{"id":"https://openalex.org/keywords/heterogeneous-graph-neural-networks","display_name":"heterogeneous graph neural networks","score":0.6819999814033508},{"id":"https://openalex.org/keywords/software-vulnerabilities","display_name":"software vulnerabilities","score":0.5559999942779541}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.9287194013595581},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.8516197204589844},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.7883343696594238},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.7181154489517212},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6162588000297546},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.5529991984367371},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40344154834747314},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.342477023601532},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2758418321609497},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.1157090961933136},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3724133","doi":"https://doi.org/10.1145/3724133","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3724133","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1145/3724133","doi":"https://doi.org/10.1145/3724133","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3724133","pdf_url":null,"source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":30,"referenced_works":["https://openalex.org/W150078352","https://openalex.org/W1971733255","https://openalex.org/W2043976500","https://openalex.org/W2052029850","https://openalex.org/W2241929320","https://openalex.org/W2295124130","https://openalex.org/W2295598076","https://openalex.org/W2604314403","https://openalex.org/W2742366641","https://openalex.org/W2759256403","https://openalex.org/W2890264517","https://openalex.org/W2890914939","https://openalex.org/W2965876165","https://openalex.org/W2967263059","https://openalex.org/W3004437357","https://openalex.org/W3043970365","https://openalex.org/W3084558590","https://openalex.org/W3085047896","https://openalex.org/W3093266389","https://openalex.org/W3185103244","https://openalex.org/W3205263675","https://openalex.org/W4210318281","https://openalex.org/W4285818247","https://openalex.org/W4288269198","https://openalex.org/W4303438160","https://openalex.org/W4375945058","https://openalex.org/W4385412300","https://openalex.org/W4393233304","https://openalex.org/W4399353588","https://openalex.org/W4404902755"],"related_works":["https://openalex.org/W4200107511","https://openalex.org/W2393340519","https://openalex.org/W4298219515","https://openalex.org/W3118510577","https://openalex.org/W2021298062","https://openalex.org/W2185499427","https://openalex.org/W1883246888","https://openalex.org/W2891427086","https://openalex.org/W2527966616","https://openalex.org/W2188018701"],"abstract_inverted_index":{"The":[0,20,33],"number":[1],"of":[2,31,116,126,186],"disclosed":[3],"vulnerabilities":[4,9,76,117],"is":[5,14,23,35],"increasing":[6],"rapidly.":[7],"Prioritizing":[8],"becomes":[10],"essential":[11],"as":[12],"it":[13],"challenging":[15],"to":[16,111,182,191],"patch":[17],"them":[18],"all.":[19],"exploitability":[21,62,90,120,134],"prediction":[22,63,171],"a":[24,36,82,97,102,124,168,179],"crucial":[25],"factor":[26],"in":[27,53,89,118,133,194],"determining":[28],"the":[29,44,50,73,113,119,145,148,153,174,184],"prioritization":[30,41],"vulnerabilities.":[32,57,162],"EPSS":[34,150,175],"widely":[37],"used":[38],"data-driven":[39],"vulnerability":[40],"model.":[42,108],"However,":[43],"literature":[45],"offers":[46],"limited":[47],"insights":[48,197],"into":[49],"model\u2019s":[51],"efficacy":[52,185],"accurately":[54],"classifying":[55],"exploited":[56],"Many":[58],"existing":[59],"works":[60],"on":[61,65,69],"focus":[64],"building":[66],"models":[67],"based":[68],"different":[70],"features,":[71],"neglecting":[72],"relationships":[74],"between":[75],"and":[77,101,198],"their":[78],"impacted":[79],"stakeholders.":[80],"Only":[81],"few":[83],"studies":[84],"have":[85,130],"explored":[86],"graph-based":[87],"techniques":[88],"prediction.":[91,121,135],"In":[92],"this":[93],"study,":[94],"we":[95],"propose":[96,123],"relational":[98,104],"vulnerability-vendor":[99],"network":[100,107],"heterogeneous":[103],"graph":[105],"convolution":[106],"It":[109],"enables":[110],"incorporate":[112],"co-exploitation":[114],"behavior":[115],"We":[122,177],"set":[125],"complementary":[127],"features":[128],"that":[129],"found":[131],"significance":[132],"Our":[136],"proposed":[137,154,165],"model":[138,155,166,189],"achieves":[139],"an":[140,157],"overall":[141],"performance":[142],"gain":[143],"over":[144],"EPSS.":[146],"Using":[147],"connoted":[149],"cut-off":[151],"label,":[152],"obtains":[156],"improvement":[158],"for":[159],"highly":[160],"exploitable":[161],"Also,":[163],"our":[164,187],"has":[167],"lower":[169],"false-negative":[170],"rate":[172],"than":[173],"cut-off.":[176],"conducted":[178],"case":[180],"study":[181],"evaluate":[183],"suggested":[188],"compared":[190],"EPSS,":[192],"resulting":[193],"favorable":[195],"new":[196],"conclusions.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":3}],"updated_date":"2026-10-14T16:39:01.820549","created_date":"2025-10-10T00:00:00"}