{"id":"https://openalex.org/W1992069767","doi":"https://doi.org/10.1109/esem.2009.5315985","title":"An empirical study of security problem reports in Linux distributions","display_name":"An empirical study of security problem reports in Linux distributions","publication_year":2009,"publication_date":"2009-10-01","ids":{"openalex":"https://openalex.org/W1992069767","doi":"https://doi.org/10.1109/esem.2009.5315985","mag":"1992069767"},"language":"en","primary_location":{"id":"doi:10.1109/esem.2009.5315985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/esem.2009.5315985","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 3rd International Symposium on Empirical Software Engineering and Measurement","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5096976300","display_name":"Prasanth Anba","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Prasanth Anba","raw_affiliation_strings":["Department of Computer Science North Carolina State University  Raleigh NC 27695 USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science North Carolina State University  Raleigh NC 27695 USA","institution_ids":["https://openalex.org/I137902535"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108545096","display_name":"Mladen A. Vouk","orcid":null},"institutions":[{"id":"https://openalex.org/I137902535","display_name":"North Carolina State University","ror":"https://ror.org/04tj63d06","country_code":"US","type":"education","lineage":["https://openalex.org/I137902535"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mladen Vouk","raw_affiliation_strings":["Department of Computer Science, North Carolina State University, Raleigh, NC, USA","Department of Computer Science North Carolina State University  Raleigh NC 27695 USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, North Carolina State University, Raleigh, NC, USA","institution_ids":["https://openalex.org/I137902535"]},{"raw_affiliation_string":"Department of Computer Science North Carolina State University  Raleigh NC 27695 USA","institution_ids":["https://openalex.org/I137902535"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":3.1057,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.92933389,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"481","last_page":"484"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11675","display_name":"Open Source Software Innovations","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1706","display_name":"Computer Science Applications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6607856750488281},{"id":"https://openalex.org/keywords/open-source","display_name":"Open source","score":0.5601716041564941},{"id":"https://openalex.org/keywords/public-domain-software","display_name":"Public domain software","score":0.5092951059341431},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.4944605827331543},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4515419006347656},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.4141859710216522},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.31093668937683105},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.20791023969650269},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.09088945388793945},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.08886891603469849}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6607856750488281},{"id":"https://openalex.org/C3018397939","wikidata":"https://www.wikidata.org/wiki/Q3644502","display_name":"Open source","level":3,"score":0.5601716041564941},{"id":"https://openalex.org/C172092558","wikidata":"https://www.wikidata.org/wiki/Q1037852","display_name":"Public domain software","level":4,"score":0.5092951059341431},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.4944605827331543},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4515419006347656},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.4141859710216522},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.31093668937683105},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.20791023969650269},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.09088945388793945},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.08886891603469849},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/esem.2009.5315985","is_oa":false,"landing_page_url":"https://doi.org/10.1109/esem.2009.5315985","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2009 3rd International Symposium on Empirical Software Engineering and Measurement","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W1554758995","https://openalex.org/W1993047585","https://openalex.org/W2107294940","https://openalex.org/W2123258673","https://openalex.org/W2142787794","https://openalex.org/W2156633971","https://openalex.org/W2185912982","https://openalex.org/W6686847716"],"related_works":["https://openalex.org/W4319870556","https://openalex.org/W2140424839","https://openalex.org/W3088845662","https://openalex.org/W2096161827","https://openalex.org/W4286377578","https://openalex.org/W4310297004","https://openalex.org/W4377692533","https://openalex.org/W2056828497","https://openalex.org/W2902006350","https://openalex.org/W2108777707"],"abstract_inverted_index":{"Existing":[0],"studies":[1],"on":[2,11,27],"problem":[3,19,32,51,76,107,134],"reports":[4,52,77,108,135],"in":[5],"open":[6],"source":[7],"projects":[8],"focus":[9],"primarily":[10],"the":[12,15,28,36,141],"analysis":[13],"of":[14,18,30,38,81,85,89,97,106,153],"general":[16],"category":[17],"reports,":[20],"or":[21],"limit":[22],"their":[23],"attention":[24],"to":[25,44],"observations":[26],"number":[29],"security":[31,37,50,75,133],"reports.":[33],"To":[34],"evaluate":[35],"a":[39,138],"project,":[40],"it":[41],"is":[42],"necessary":[43],"know":[45],"not":[46],"only":[47],"how":[48,57,62,110,116],"many":[49,58],"are":[53,59,65,113,119],"logged":[54],"but":[55],"also":[56],"reported":[60],"and":[61,94,102,109,115,123,130,145],"promptly":[63,117],"they":[64,112,118],"corrected":[66],"etc.":[67],"In":[68],"this":[69],"paper,":[70],"we":[71],"study":[72],"publicly":[73],"disclosed":[74],"from":[78],"eight":[79],"releases":[80,84,88,96],"Fedora,":[82],"nine":[83],"Ubuntu,":[86],"four":[87],"RedHat":[90],"Enterprise":[91],"Linux":[92,99],"(RHEL)":[93],"two":[95],"Suse":[98,124],"distributions,":[100],"analyse":[101],"discuss":[103],"which":[104],"type":[105],"frequently":[111],"reported,":[114],"corrected.":[120],"Overall,":[121],"Fedora":[122],"show":[125,147],"good":[126],"results":[127,150],"with":[128,151],"high":[129],"medium":[131],"severity":[132],"resolved":[136],"without":[137],"backlog.":[139],"On":[140],"other":[142],"hand,":[143],"RHEL":[144],"Ubuntu":[146],"less":[148],"positive":[149],"presence":[152],"backlogs.":[154]},"counts_by_year":[{"year":2021,"cited_by_count":1},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2016,"cited_by_count":2},{"year":2012,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}
