{"id":"https://openalex.org/W7225262834","doi":"https://doi.org/10.3390/computers15110800","title":"Constrained Nested-Budget Editing: A Recoverable Post-Learning Editor for Fixed-Budget Vulnerability Prioritization","display_name":"Constrained Nested-Budget Editing: A Recoverable Post-Learning Editor for Fixed-Budget Vulnerability Prioritization","publication_year":2026,"publication_date":"2026-11-04","ids":{"openalex":"https://openalex.org/W7225262834","doi":"https://doi.org/10.3390/computers15110800"},"language":"en","primary_location":{"id":"doi:10.3390/computers15110800","doi":"https://doi.org/10.3390/computers15110800","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15110800","pdf_url":null,"source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/computers15110800","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138752600","display_name":"Abdul Mohsin","orcid":"https://orcid.org/0009-0001-2595-2273","observed_orcids":["https://orcid.org/0009-0001-2595-2273"]},"institutions":[{"id":"https://openalex.org/I4210164135","display_name":"Birla Institute of Technology and Science, Pilani - Dubai Campus","ror":"https://ror.org/05jnbme07","country_code":"AE","type":"education","lineage":["https://openalex.org/I4210164135","https://openalex.org/I74796645"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Abdul Mohsin","raw_affiliation_strings":["Department of Computer Science, Birla Institute of Technology and Science (BITS) Pilani, Dubai Campus, Dubai P.O. Box 345055, United Arab Emirates"],"raw_orcid":"https://orcid.org/0009-0001-2595-2273","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Birla Institute of Technology and Science (BITS) Pilani, Dubai Campus, Dubai P.O. Box 345055, United Arab Emirates","institution_ids":["https://openalex.org/I4210164135"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103149437","display_name":"Sujala D. Shetty","orcid":"https://orcid.org/0000-0003-3992-1109","observed_orcids":["https://orcid.org/0000-0003-3992-1109"]},"institutions":[{"id":"https://openalex.org/I4210164135","display_name":"Birla Institute of Technology and Science, Pilani - Dubai Campus","ror":"https://ror.org/05jnbme07","country_code":"AE","type":"education","lineage":["https://openalex.org/I4210164135","https://openalex.org/I74796645"]}],"countries":["AE"],"is_corresponding":true,"raw_author_name":"Sujala D. Shetty","raw_affiliation_strings":["Department of Computer Science, Birla Institute of Technology and Science (BITS) Pilani, Dubai Campus, Dubai P.O. Box 345055, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0003-3992-1109","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Birla Institute of Technology and Science (BITS) Pilani, Dubai Campus, Dubai P.O. Box 345055, United Arab Emirates","institution_ids":["https://openalex.org/I4210164135"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5103149437"],"corresponding_institution_ids":["https://openalex.org/I4210164135"],"apc_list":{"value":1800,"currency":"CHF","value_usd":2172},"apc_paid":{"value":1800,"currency":"CHF","value_usd":2172},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.90845665,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":"15","issue":"11","first_page":"800","last_page":"800"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.7056000232696533,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.7056000232696533,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.23899999260902405,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.005799999926239252,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability-prioritization","display_name":"vulnerability prioritization","score":0.9620000123977661},{"id":"https://openalex.org/keywords/pasta","display_name":"pasta","score":0.6169999837875366},{"id":"https://openalex.org/keywords/nuclei","display_name":"nuclei","score":0.6370000243186951},{"id":"https://openalex.org/keywords/reliability-threshold","display_name":"reliability threshold","score":0.5569999814033508}],"concepts":[{"id":"https://openalex.org/C2777615720","wikidata":"https://www.wikidata.org/wiki/Q11888847","display_name":"Prioritization","level":2,"score":0.6879000067710876},{"id":"https://openalex.org/C160403385","wikidata":"https://www.wikidata.org/wiki/Q220543","display_name":"Queue","level":2,"score":0.6866000294685364},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.6814000010490417},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6753000020980835},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.6069999933242798},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5525000095367432},{"id":"https://openalex.org/C34388435","wikidata":"https://www.wikidata.org/wiki/Q2267362","display_name":"Bounded function","level":2,"score":0.4729999899864197},{"id":"https://openalex.org/C42475967","wikidata":"https://www.wikidata.org/wiki/Q194292","display_name":"Operations research","level":1,"score":0.3330000042915344},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33070001006126404},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.31209999322891235},{"id":"https://openalex.org/C2777267654","wikidata":"https://www.wikidata.org/wiki/Q3519023","display_name":"Test (biology)","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.2678000032901764},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/computers15110800","doi":"https://doi.org/10.3390/computers15110800","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15110800","pdf_url":null,"source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/computers15110800","doi":"https://doi.org/10.3390/computers15110800","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15110800","pdf_url":null,"source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["cwts-core","doaj","norway-1","poland-20","russia-white-list-2"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W2974695716","https://openalex.org/W3107698292","https://openalex.org/W3183048323","https://openalex.org/W3183516990","https://openalex.org/W3184339106","https://openalex.org/W3210360585","https://openalex.org/W3214395631","https://openalex.org/W4206083420","https://openalex.org/W4210318281","https://openalex.org/W4226043105","https://openalex.org/W4280598593","https://openalex.org/W4280652991","https://openalex.org/W4293193423","https://openalex.org/W4293235203","https://openalex.org/W4309089965","https://openalex.org/W4312798241","https://openalex.org/W4322627146","https://openalex.org/W4361012985","https://openalex.org/W4367860606","https://openalex.org/W4378446959","https://openalex.org/W4380490520","https://openalex.org/W4383899643","https://openalex.org/W4385412300","https://openalex.org/W4392996195","https://openalex.org/W4400976724","https://openalex.org/W4401202336","https://openalex.org/W4405597200","https://openalex.org/W4408343551","https://openalex.org/W4415145773","https://openalex.org/W4416549283","https://openalex.org/W4416740912","https://openalex.org/W7133186244","https://openalex.org/W7134939857","https://openalex.org/W7162141089","https://openalex.org/W7164915651","https://openalex.org/W7168035262","https://openalex.org/W7223119318"],"related_works":["https://openalex.org/W7165134730","https://openalex.org/W7216429301","https://openalex.org/W2150331420","https://openalex.org/W7111178155","https://openalex.org/W7204204302","https://openalex.org/W7213434884","https://openalex.org/W7223306567","https://openalex.org/W7083671173","https://openalex.org/W7162141089","https://openalex.org/W7166661616"],"abstract_inverted_index":{"Security":[0],"teams":[1],"can":[2],"review":[3,31],"only":[4],"a":[5,9,25,37,162,182,188],"small":[6],"part":[7],"of":[8,43,80,114],"vulnerability":[10],"queue.":[11],"We":[12,33],"propose":[13],"Constrained":[14],"Nested-Budget":[15],"Editing":[16],"(CNBE),":[17],"which":[18],"uses":[19],"limited,":[20],"recorded":[21],"swaps":[22],"to":[23,59,160],"apply":[24],"learned":[26,163],"proposal":[27,67],"while":[28,77],"protecting":[29],"successive":[30],"frontiers.":[32],"test":[34],"it":[35,168],"against":[36],"simulated,":[38],"not":[39,146,170,178],"analyst-approved,":[40],"PASTA":[41],"queue":[42,81,185],"100,000":[44],"vulnerabilities.":[45],"On":[46,91],"the":[47,53,66,97,111,149],"retrospective":[48],"Nuclei":[49],"endpoint,":[50],"capture":[51,72,101],"within":[52],"first":[54],"1%":[55,122],"increased":[56],"from":[57,65,96],"23":[58],"34":[60],"events.":[61],"This":[62],"gain":[63],"came":[64],"ranker:":[68],"CNBE":[69,118,126,153],"matched":[70,117],"its":[71],"at":[73,119,133,165,187],"all":[74,86],"declared":[75],"budgets":[76],"changing":[78],"2.5\u20132.7%":[79],"positions,":[82],"compared":[83],"with":[84,109],"almost":[85],"positions":[87,116],"for":[88],"full":[89],"replacement.":[90],"102,244":[92],"previously":[93],"untouched":[94],"cases":[95],"same":[98,112],"period,":[99],"top-1%":[100],"was":[102],"30":[103],"versus":[104],"20.":[105],"A":[106],"simpler":[107],"comparator":[108],"approximately":[110],"number":[113],"changed":[115],"0.5%":[120],"and":[121,142],"on":[123,135,181],"three":[124],"endpoints;":[125],"captured":[127],"one":[128],"or":[129,186],"two":[130,136],"more":[131],"events":[132],"2%":[134],"endpoints.":[137],"The":[138,175],"selected":[139],"reliability":[140],"threshold":[141],"non-inferiority":[143],"rules":[144],"did":[145],"bind":[147],"in":[148],"original":[150],"frozen":[151],"experiment.":[152],"therefore":[154],"provides":[155],"an":[156],"auditable,":[157],"bounded":[158],"way":[159],"deliver":[161],"ranking":[164],"fixed":[166],"budgets;":[167],"does":[169,177],"independently":[171],"increase":[172],"predictive":[173],"accuracy.":[174],"evaluation":[176],"establish":[179],"performance":[180],"real":[183],"approved":[184],"future":[189],"cutoff.":[190]},"counts_by_year":[],"updated_date":"2026-11-06T12:05:46.655746","created_date":"2026-11-05T00:00:00"}