{"id":"https://openalex.org/W2096274199","doi":"https://doi.org/10.1109/tse.2007.70712","title":"An Empirical Analysis of the Impact of Software Vulnerability Announcements on Firm Stock Price","display_name":"An Empirical Analysis of the Impact of Software Vulnerability Announcements on Firm Stock Price","publication_year":2007,"publication_date":"2007-07-13","ids":{"openalex":"https://openalex.org/W2096274199","doi":"https://doi.org/10.1109/tse.2007.70712","mag":"2096274199"},"language":"en","primary_location":{"id":"doi:10.1109/tse.2007.70712","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2007.70712","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045292050","display_name":"Rahul Telang","orcid":"https://orcid.org/0000-0002-9353-7661"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rahul Telang","raw_affiliation_strings":["H.J. Heinz III School of Public Policy and Management, Carnegie Mellon University, Pittsburgh, PA, USA","[H.J. Heinz III School of Public Policy and Management, Carnegie Mellon University, Pittsburgh, PA, USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"H.J. Heinz III School of Public Policy and Management, Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"[H.J. Heinz III School of Public Policy and Management, Carnegie Mellon University, Pittsburgh, PA, USA]","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5037935758","display_name":"Sunil Wattal","orcid":"https://orcid.org/0000-0003-4078-5052"},"institutions":[{"id":"https://openalex.org/I84392919","display_name":"Temple University","ror":"https://ror.org/00kx1jb78","country_code":"US","type":"education","lineage":["https://openalex.org/I84392919"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sunil Wattal","raw_affiliation_strings":["Fox School of Business, Temple University, Philadelphia, PA, USA","\u2020Fox School of Business,Temple University,Philadelphia,PA,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Fox School of Business, Temple University, Philadelphia, PA, USA","institution_ids":["https://openalex.org/I84392919"]},{"raw_affiliation_string":"\u2020Fox School of Business,Temple University,Philadelphia,PA,USA","institution_ids":["https://openalex.org/I84392919"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":39.1077,"has_fulltext":false,"cited_by_count":245,"citation_normalized_percentile":{"value":0.99639208,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"33","issue":"8","first_page":"544","last_page":"557"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10081","display_name":"Auditing, Earnings Management, Governance","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/1402","display_name":"Accounting"},"field":{"id":"https://openalex.org/fields/14","display_name":"Business, Management and Accounting"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9778000116348267,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.8188230991363525},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5441253781318665},{"id":"https://openalex.org/keywords/incentive","display_name":"Incentive","score":0.539021372795105},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.5381525158882141},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.45028477907180786},{"id":"https://openalex.org/keywords/network-effect","display_name":"Network effect","score":0.4317161440849304},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.4241184890270233},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.41924434900283813},{"id":"https://openalex.org/keywords/industrial-organization","display_name":"Industrial organization","score":0.35281914472579956},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.27545812726020813},{"id":"https://openalex.org/keywords/marketing","display_name":"Marketing","score":0.2503208518028259},{"id":"https://openalex.org/keywords/economics","display_name":"Economics","score":0.23442599177360535},{"id":"https://openalex.org/keywords/microeconomics","display_name":"Microeconomics","score":0.11180126667022705}],"concepts":[{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.8188230991363525},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5441253781318665},{"id":"https://openalex.org/C29122968","wikidata":"https://www.wikidata.org/wiki/Q1414816","display_name":"Incentive","level":2,"score":0.539021372795105},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.5381525158882141},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.45028477907180786},{"id":"https://openalex.org/C96219163","wikidata":"https://www.wikidata.org/wiki/Q649124","display_name":"Network effect","level":2,"score":0.4317161440849304},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.4241184890270233},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.41924434900283813},{"id":"https://openalex.org/C40700","wikidata":"https://www.wikidata.org/wiki/Q1411783","display_name":"Industrial organization","level":1,"score":0.35281914472579956},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.27545812726020813},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.2503208518028259},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.23442599177360535},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.11180126667022705},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tse.2007.70712","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tse.2007.70712","pdf_url":null,"source":{"id":"https://openalex.org/S8351582","display_name":"IEEE Transactions on Software Engineering","issn_l":"0098-5589","issn":["0098-5589","1939-3520","2326-3881"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Software Engineering","raw_type":"journal-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.165.4080","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.165.4080","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.heinz.cmu.edu/%7Ertelang/tse_published.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320310207","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W148329840","https://openalex.org/W1483280370","https://openalex.org/W1501321335","https://openalex.org/W1545622404","https://openalex.org/W1590165779","https://openalex.org/W1863670505","https://openalex.org/W2009659438","https://openalex.org/W2010997253","https://openalex.org/W2018085556","https://openalex.org/W2027792385","https://openalex.org/W2031892005","https://openalex.org/W2034569805","https://openalex.org/W2040198418","https://openalex.org/W2049647828","https://openalex.org/W2056075452","https://openalex.org/W2058746502","https://openalex.org/W2063236501","https://openalex.org/W2066569036","https://openalex.org/W2070527651","https://openalex.org/W2078281125","https://openalex.org/W2081208077","https://openalex.org/W2081606087","https://openalex.org/W2083147302","https://openalex.org/W2085249578","https://openalex.org/W2086651574","https://openalex.org/W2099656162","https://openalex.org/W2101288668","https://openalex.org/W2101718392","https://openalex.org/W2107834528","https://openalex.org/W2111433322","https://openalex.org/W2112612878","https://openalex.org/W2117405938","https://openalex.org/W2121057544","https://openalex.org/W2122224612","https://openalex.org/W2122383909","https://openalex.org/W2128778916","https://openalex.org/W2130162792","https://openalex.org/W2131733299","https://openalex.org/W2144642244","https://openalex.org/W2147059897","https://openalex.org/W2147881652","https://openalex.org/W2154153720","https://openalex.org/W2294407885","https://openalex.org/W3123365097","https://openalex.org/W3123385249","https://openalex.org/W3124342358","https://openalex.org/W4231054792","https://openalex.org/W4300567850","https://openalex.org/W6678051109","https://openalex.org/W6679109501"],"related_works":["https://openalex.org/W922414892","https://openalex.org/W2185499427","https://openalex.org/W2393340519","https://openalex.org/W4298219515","https://openalex.org/W2147569372","https://openalex.org/W2371301679","https://openalex.org/W4200107511","https://openalex.org/W2161453659","https://openalex.org/W4381854096","https://openalex.org/W1415835900"],"abstract_inverted_index":{"Security":[0],"defects":[1,24],"in":[2,10,53,75,78,87,114,152,197,215,268],"software":[3,26,47,88,107,131,183,199,227,303],"cost":[4],"millions":[5],"of":[6,12,22,33,39,56,81,121,156,253,285],"dollars":[7],"to":[8,71,94,112,191,257,278],"firms":[9],"terms":[11],"downtime,":[13],"disruptions,":[14],"and":[15,36,42,65,146,166,194],"confidentiality":[16],"breaches.":[17],"However,":[18],"the":[19,37,54,79,150,153,171,234,240,250,254,266,275,283],"economic":[20],"implications":[21,301],"these":[23],"for":[25,179,302],"vendors":[27,48,108,304],"are":[28,124],"not":[29,100],"well":[30,306],"understood.":[31],"Lack":[32],"legal":[34],"liability":[35],"presence":[38],"switching":[40],"costs":[41,52],"network":[43],"externalities":[44],"may":[45],"protect":[46],"from":[49,162],"incurring":[50],"significant":[51,73,195],"event":[55,80],"a":[57,82,130,137,157,192,198,208,219,226,280,292],"vulnerability":[58,138,147,188,220],"announcement,":[59],"unlike":[60],"such":[61,169],"industries":[62],"as":[63,170,305,307],"auto":[64],"pharmaceuticals,":[66],"which":[67,104],"have":[68,99,109,291],"been":[69,101],"known":[70],"suffer":[72],"loss":[74],"market":[76,133,154,201,231,235],"value":[77,134,155,214],"defect":[83],"announcement.":[84],"Although":[85],"research":[86],"economics":[89],"has":[90],"studied":[91],"firms'":[92],"incentives":[93],"improve":[95],"overall":[96],"quality,":[97],"there":[98],"any":[102],"studies":[103],"show":[105,186],"that":[106,187,225,265],"an":[110],"incentive":[111],"invest":[113],"building":[115],"more":[116,230,272,288],"secure":[117],"software.":[118],"The":[119],"objectives":[120],"this":[122],"paper":[123],"twofold.":[125],"1)":[126],"We":[127,142,159,185,223,263],"examine":[128,143],"how":[129,144],"vendor's":[132,200],"changes":[135],"when":[136,218],"is":[139,221,236,242,271],"announced.":[140],"2)":[141],"firm":[145],"characteristics":[148],"mediate":[149],"change":[151,196,267],"vendor.":[158],"collect":[160],"data":[161],"leading":[163],"national":[164],"newspapers":[165],"industry":[167],"sources,":[168],"Computer":[172],"Emergency":[173],"Response":[174],"Team":[175],"(CERT),":[176],"by":[177],"searching":[178],"reports":[180],"on":[181,206],"published":[182],"vulnerabilities.":[184],"announcements":[189],"lead":[190],"negative":[193,273],"value.":[202],"In":[203],"our":[204],"sample,":[205],"average,":[207],"vendor":[209,228,241,276],"loses":[210,229],"around":[211],"0.6":[212],"percent":[213],"stock":[216,269],"price":[217,270],"reported.":[222],"find":[224,264],"share":[232],"if":[233,239,274],"competitive":[237],"or":[238],"small.":[243],"To":[244],"provide":[245,279],"further":[246],"insight,":[247],"we":[248],"use":[249],"information":[251],"content":[252],"disclosure":[255],"announcement":[256],"classify":[258],"vulnerabilities":[259],"into":[260],"various":[261],"types.":[262],"fails":[277],"patch":[281],"at":[282],"time":[284],"disclosure.":[286],"Also,":[287],"severe":[289],"flaws":[290],"significantly":[293],"greater":[294],"impact.":[295],"Our":[296],"analysis":[297],"provides":[298],"many":[299],"interesting":[300],"policy":[308],"makers.":[309]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":8},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":18},{"year":2022,"cited_by_count":14},{"year":2021,"cited_by_count":17},{"year":2020,"cited_by_count":16},{"year":2019,"cited_by_count":15},{"year":2018,"cited_by_count":20},{"year":2017,"cited_by_count":14},{"year":2016,"cited_by_count":16},{"year":2015,"cited_by_count":11},{"year":2014,"cited_by_count":13},{"year":2013,"cited_by_count":11},{"year":2012,"cited_by_count":9}],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2025-10-10T00:00:00"}