{"id":"https://openalex.org/W3047932800","doi":"https://doi.org/10.1109/cns48642.2020.9162309","title":"A Machine Learning-based Approach for Automated Vulnerability Remediation Analysis","display_name":"A Machine Learning-based Approach for Automated Vulnerability Remediation Analysis","publication_year":2020,"publication_date":"2020-06-01","ids":{"openalex":"https://openalex.org/W3047932800","doi":"https://doi.org/10.1109/cns48642.2020.9162309","mag":"3047932800"},"language":"en","primary_location":{"id":"doi:10.1109/cns48642.2020.9162309","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns48642.2020.9162309","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076831677","display_name":"Fengli Zhang","orcid":"https://orcid.org/0000-0003-2300-8817"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fengli Zhang","raw_affiliation_strings":["University of Arkansas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas","institution_ids":["https://openalex.org/I78715868"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009392352","display_name":"Philip Huff","orcid":"https://orcid.org/0000-0003-0869-2147"},"institutions":[{"id":"https://openalex.org/I102401767","display_name":"University of Arkansas at Little Rock","ror":"https://ror.org/04fttyv97","country_code":"US","type":"education","lineage":["https://openalex.org/I102401767"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Philip Huff","raw_affiliation_strings":["University of Arkansas at Little Rock"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas at Little Rock","institution_ids":["https://openalex.org/I102401767"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010750132","display_name":"Kylie McClanahan","orcid":"https://orcid.org/0000-0002-7809-6554"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kylie McClanahan","raw_affiliation_strings":["University of Arkansas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas","institution_ids":["https://openalex.org/I78715868"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101927781","display_name":"Qinghua Li","orcid":"https://orcid.org/0000-0002-7734-6216"},"institutions":[{"id":"https://openalex.org/I78715868","display_name":"University of Arkansas at Fayetteville","ror":"https://ror.org/05jbt9m15","country_code":"US","type":"education","lineage":["https://openalex.org/I78715868"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Qinghua Li","raw_affiliation_strings":["University of Arkansas"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas","institution_ids":["https://openalex.org/I78715868"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":23,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"9"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9972000122070312,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7134456634521484},{"id":"https://openalex.org/keywords/firmware","display_name":"Firmware","score":0.6903530359268188},{"id":"https://openalex.org/keywords/electric-utility","display_name":"Electric utility","score":0.5999546647071838},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5535821318626404},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.5432490110397339},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5067971348762512},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5029198527336121},{"id":"https://openalex.org/keywords/automation","display_name":"Automation","score":0.49575552344322205},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.4934779405593872},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.43791458010673523},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.4151410460472107},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.39186742901802063},{"id":"https://openalex.org/keywords/systems-engineering","display_name":"Systems engineering","score":0.1715908646583557},{"id":"https://openalex.org/keywords/power","display_name":"Power (physics)","score":0.1552715003490448},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.15025490522384644},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.09192365407943726}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7134456634521484},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.6903530359268188},{"id":"https://openalex.org/C2777819126","wikidata":"https://www.wikidata.org/wiki/Q1326624","display_name":"Electric utility","level":2,"score":0.5999546647071838},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5535821318626404},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.5432490110397339},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5067971348762512},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5029198527336121},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.49575552344322205},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.4934779405593872},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.43791458010673523},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.4151410460472107},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.39186742901802063},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.1715908646583557},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.1552715003490448},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.15025490522384644},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.09192365407943726},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/cns48642.2020.9162309","is_oa":false,"landing_page_url":"https://doi.org/10.1109/cns48642.2020.9162309","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2020 IEEE Conference on Communications and Network Security (CNS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W133470593","https://openalex.org/W1490011260","https://openalex.org/W1580718997","https://openalex.org/W2004584049","https://openalex.org/W2116148009","https://openalex.org/W2120197657","https://openalex.org/W2168234580","https://openalex.org/W2297419069","https://openalex.org/W2626631366","https://openalex.org/W2742172093","https://openalex.org/W2748690817","https://openalex.org/W2752761845","https://openalex.org/W2766411424","https://openalex.org/W2777833188","https://openalex.org/W2793157084","https://openalex.org/W2804264889","https://openalex.org/W2888940240","https://openalex.org/W2905025879","https://openalex.org/W2909996808","https://openalex.org/W2940895343","https://openalex.org/W2962960733","https://openalex.org/W2963233086","https://openalex.org/W3048335302","https://openalex.org/W3141872514","https://openalex.org/W6605468800","https://openalex.org/W6757638373"],"related_works":["https://openalex.org/W2393340519","https://openalex.org/W4298219515","https://openalex.org/W3118510577","https://openalex.org/W2021298062","https://openalex.org/W2185499427","https://openalex.org/W1883246888","https://openalex.org/W2371301679","https://openalex.org/W2527966616","https://openalex.org/W4200316191","https://openalex.org/W2188018701"],"abstract_inverted_index":{"Security":[0],"vulnerabilities":[1,23,60],"in":[2,35],"firmware/software":[3],"pose":[4],"an":[5,109],"important":[6],"threat":[7],"ton":[8],"power":[9],"grid":[10],"security,":[11],"and":[12,52,55,80,112],"thus":[13],"electric":[14,37,103,110],"utility":[15,111],"companies":[16],"should":[17],"quickly":[18],"decide":[19],"how":[20],"to":[21,40,44,48,61,97,108],"remediate":[22],"after":[24],"they":[25],"are":[26,67],"discovered.":[27],"Making":[28],"remediation":[29,65,99],"decisions":[30,66],"is":[31],"a":[32,73,92],"challenging":[33],"task":[34],"the":[36,41,46,56,123,127,131],"industry":[38],"due":[39],"many":[42],"factors":[43],"consider,":[45],"balance":[47],"maintain":[49],"between":[50],"patching":[51],"service":[53],"reliability,":[54],"large":[57],"amount":[58],"of":[59,84,130],"deal":[62],"with.":[63],"Unfortunately,":[64],"current":[68],"manually":[69],"made":[70],"which":[71],"take":[72],"long":[74],"time.":[75],"This":[76],"increases":[77],"security":[78],"risks":[79],"incurs":[81],"high":[82,128],"cost":[83],"vulnerability":[85],"management.":[86],"In":[87],"this":[88],"paper,":[89],"we":[90],"propose":[91],"machine":[93],"learning-based":[94],"automation":[95],"framework":[96],"automate":[98],"decision":[100],"analysis":[101],"for":[102],"utilities.":[104],"We":[105],"apply":[106],"it":[107],"conduct":[113],"extensive":[114],"experiments":[115],"over":[116],"two":[117],"real":[118],"operation":[119],"datasets":[120],"obtained":[121],"from":[122],"utility.":[124],"Results":[125],"show":[126],"effectiveness":[129],"solution.":[132]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":4},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":2}],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2025-10-10T00:00:00"}