{"id":"https://openalex.org/W3048253066","doi":"https://doi.org/10.1109/tdsc.2020.3014872","title":"Predicting the Discovery Pattern of Publically Known Exploited Vulnerabilities","display_name":"Predicting the Discovery Pattern of Publically Known Exploited Vulnerabilities","publication_year":2020,"publication_date":"2020-08-06","ids":{"openalex":"https://openalex.org/W3048253066","doi":"https://doi.org/10.1109/tdsc.2020.3014872","mag":"3048253066"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2020.3014872","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2020.3014872","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082320001","display_name":"Yazdan Movahedi","orcid":"https://orcid.org/0000-0001-9214-2273"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]},{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Yazdan Movahedi","raw_affiliation_strings":["Department of Mechanical Engineering, University of Maryland at College Park, 1068 College Park, Maryland United States (e-mail: ymovahed@terpmail.umd.edu)","Center for Risk and Reliability, University of Maryland, College Park, MD 20742","Center for Software Reliability, City, University of London, London, UK EC1V 0HB","City, University of London Institutional Repository"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mechanical Engineering, University of Maryland at College Park, 1068 College Park, Maryland United States (e-mail: ymovahed@terpmail.umd.edu)","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"Center for Risk and Reliability, University of Maryland, College Park, MD 20742","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"Center for Software Reliability, City, University of London, London, UK EC1V 0HB","institution_ids":["https://openalex.org/I180825142"]},{"raw_affiliation_string":"City, University of London Institutional Repository","institution_ids":["https://openalex.org/I180825142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050380937","display_name":"Michel Cukier","orcid":"https://orcid.org/0000-0001-6250-4632"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]},{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Michel Cukier","raw_affiliation_strings":["Department of Mechanical Engineering, University of Maryland at College Park, 1068 College Park, Maryland United States (e-mail: mcukier@umd.edu)","Center for Risk and Reliability, University of Maryland, College Park, MD 20742","Center for Software Reliability, City, University of London, London, UK EC1V 0HB","City, University of London Institutional Repository"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Mechanical Engineering, University of Maryland at College Park, 1068 College Park, Maryland United States (e-mail: mcukier@umd.edu)","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"Center for Risk and Reliability, University of Maryland, College Park, MD 20742","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"Center for Software Reliability, City, University of London, London, UK EC1V 0HB","institution_ids":["https://openalex.org/I180825142"]},{"raw_affiliation_string":"City, University of London Institutional Repository","institution_ids":["https://openalex.org/I180825142"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037476990","display_name":"Ilir Gashi","orcid":"https://orcid.org/0000-0002-8017-3184"},"institutions":[{"id":"https://openalex.org/I180825142","display_name":"City, University of London","ror":"https://ror.org/04489at23","country_code":"GB","type":"education","lineage":["https://openalex.org/I124357947","https://openalex.org/I180825142"]},{"id":"https://openalex.org/I66946132","display_name":"University of Maryland, College Park","ror":"https://ror.org/047s2c258","country_code":"US","type":"education","lineage":["https://openalex.org/I66946132"]}],"countries":["GB","US"],"is_corresponding":false,"raw_author_name":"Ilir Gashi","raw_affiliation_strings":["Department of Computer Science, INTO City University London, 425941 London, London United Kingdom of Great Britain and Northern Ireland (e-mail: ilir.gashi.1@city.ac.uk)","Center for Risk and Reliability, University of Maryland, College Park, MD 20742","Center for Software Reliability, City, University of London, London, UK EC1V 0HB","City, University of London Institutional Repository"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, INTO City University London, 425941 London, London United Kingdom of Great Britain and Northern Ireland (e-mail: ilir.gashi.1@city.ac.uk)","institution_ids":["https://openalex.org/I180825142"]},{"raw_affiliation_string":"Center for Risk and Reliability, University of Maryland, College Park, MD 20742","institution_ids":["https://openalex.org/I66946132"]},{"raw_affiliation_string":"Center for Software Reliability, City, University of London, London, UK EC1V 0HB","institution_ids":["https://openalex.org/I180825142"]},{"raw_affiliation_string":"City, University of London Institutional Repository","institution_ids":["https://openalex.org/I180825142"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2681,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.6272014,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.993399977684021,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9868999719619751,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11719","display_name":"Data Quality and Management","score":0.9860000014305115,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5065776109695435},{"id":"https://openalex.org/keywords/computational-biology","display_name":"Computational biology","score":0.32073673605918884},{"id":"https://openalex.org/keywords/biology","display_name":"Biology","score":0.14415141940116882}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5065776109695435},{"id":"https://openalex.org/C70721500","wikidata":"https://www.wikidata.org/wiki/Q177005","display_name":"Computational biology","level":1,"score":0.32073673605918884},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.14415141940116882}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tdsc.2020.3014872","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2020.3014872","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},{"id":"pmh:oai:openaccess.city.ac.uk:24766","is_oa":false,"landing_page_url":"https://openaccess.city.ac.uk/view/creators_id/i=2Egashi.html>","pdf_url":null,"source":{"id":"https://openalex.org/S4306401940","display_name":"City Research Online (City University London)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I180825142","host_organization_name":"City, University of London","host_organization_lineage":["https://openalex.org/I180825142"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"acceptedVersion","is_accepted":true,"is_published":false,"raw_source_name":null,"raw_type":"Article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.47999998927116394,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1020587389","display_name":null,"funder_award_id":"700692","funder_id":"https://openalex.org/F4320337529","funder_display_name":"Cordis"},{"id":"https://openalex.org/G35831914","display_name":null,"funder_award_id":"1223634","funder_id":"https://openalex.org/F4320337388","funder_display_name":"Division of Computer and Network Systems"},{"id":"https://openalex.org/G5413299184","display_name":"Diversity and Defence in Depth for Security - A Probabilistic Approach (D3S)","funder_award_id":"EP/M019462/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"},{"id":"https://openalex.org/G971583128","display_name":null,"funder_award_id":"EP/M019462/1","funder_id":"https://openalex.org/F4320334627","funder_display_name":"Engineering and Physical Sciences Research Council"}],"funders":[{"id":"https://openalex.org/F4320334627","display_name":"Engineering and Physical Sciences Research Council","ror":"https://ror.org/0439y7842"},{"id":"https://openalex.org/F4320337388","display_name":"Division of Computer and Network Systems","ror":"https://ror.org/02rdzmk74"},{"id":"https://openalex.org/F4320337529","display_name":"Cordis","ror":"https://ror.org/03qd7mz70"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":48,"referenced_works":["https://openalex.org/W110007310","https://openalex.org/W1547298448","https://openalex.org/W1563025380","https://openalex.org/W1573560801","https://openalex.org/W1580060001","https://openalex.org/W1586335931","https://openalex.org/W1588337522","https://openalex.org/W1603939896","https://openalex.org/W1633140981","https://openalex.org/W1966676388","https://openalex.org/W1979820341","https://openalex.org/W1989130706","https://openalex.org/W2004584049","https://openalex.org/W2005227631","https://openalex.org/W2010896594","https://openalex.org/W2034621243","https://openalex.org/W2044527277","https://openalex.org/W2056646884","https://openalex.org/W2057994388","https://openalex.org/W2092198059","https://openalex.org/W2100115021","https://openalex.org/W2104556041","https://openalex.org/W2108246235","https://openalex.org/W2114712239","https://openalex.org/W2125487889","https://openalex.org/W2132704120","https://openalex.org/W2138239311","https://openalex.org/W2142105636","https://openalex.org/W2146606513","https://openalex.org/W2146949683","https://openalex.org/W2149905014","https://openalex.org/W2153242493","https://openalex.org/W2165172361","https://openalex.org/W2166884436","https://openalex.org/W2237954913","https://openalex.org/W2274324447","https://openalex.org/W2721028813","https://openalex.org/W2726442151","https://openalex.org/W2789721999","https://openalex.org/W2884775584","https://openalex.org/W2893748770","https://openalex.org/W2902634282","https://openalex.org/W2969889096","https://openalex.org/W3125589452","https://openalex.org/W6607023274","https://openalex.org/W6634397726","https://openalex.org/W6676399973","https://openalex.org/W6748832934"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2748952813","https://openalex.org/W2390279801","https://openalex.org/W2358668433","https://openalex.org/W4396701345","https://openalex.org/W2376932109","https://openalex.org/W2001405890","https://openalex.org/W4396696052","https://openalex.org/W2382290278","https://openalex.org/W4395014643"],"abstract_inverted_index":{"Vulnerabilities":[0],"with":[1,26,43,105],"publically":[2,63,69],"known":[3,22,45,64,70],"exploits":[4],"typically":[5],"form":[6],"2-7%":[7],"of":[8,21,30,62,97,122,126,147],"all":[9,68],"vulnerabilities":[10,24,66,71,111],"reported":[11,72],"for":[12,57,73,114],"a":[13,18,41,44,74],"given":[14,75],"software":[15,128],"version.":[16],"With":[17],"smaller":[19],"number":[20,29],"exploited":[23,65,110],"compared":[25,101],"the":[27,59,94,106,145],"total":[28],"vulnerabilities,":[31],"it":[32],"is":[33],"more":[34,135],"difficult":[35],"to":[36,92,134],"model":[37,88],"and":[38,84],"predict":[39],"when":[40,108],"vulnerability":[42,80],"exploit":[46],"will":[47],"be":[48],"reported.":[49],"In":[50],"this":[51],"paper,":[52],"we":[53,129],"introduce":[54],"an":[55],"approach":[56,132,149],"predicting":[58],"discovery":[60,81],"pattern":[61],"using":[67],"software.":[76],"Eight":[77],"commonly":[78],"used":[79,113],"models":[82],"(VDMs)":[83],"one":[85,143],"neural":[86],"network":[87],"(NNM)":[89],"were":[90,112],"utilized":[91],"evaluate":[93],"prediction":[95,123],"capability":[96],"our":[98,131,148],"approach.":[99],"We":[100],"their":[102],"predictions":[103],"results":[104,117,137],"scenario":[107],"only":[109],"prediction.":[115],"Our":[116],"show":[118],"that,":[119],"in":[120,138,142],"terms":[121],"accuracy,":[124],"out":[125],"eight":[127],"analyzed,":[130],"led":[133],"accurate":[136],"seven":[139],"cases.":[140],"Only":[141],"case,":[144],"accuracy":[146],"was":[150],"worse":[151],"by":[152],"1.6%.":[153]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":2},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}