{"id":"https://openalex.org/W1993805115","doi":"https://doi.org/10.1145/1456362.1456363","title":"The economics of finding and fixing vulnerabilities in distributed systems","display_name":"The economics of finding and fixing vulnerabilities in distributed systems","publication_year":2008,"publication_date":"2008-10-27","ids":{"openalex":"https://openalex.org/W1993805115","doi":"https://doi.org/10.1145/1456362.1456363","mag":"1993805115"},"language":"en","primary_location":{"id":"doi:10.1145/1456362.1456363","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1456362.1456363","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th ACM workshop on Quality of protection","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004879993","display_name":"Gunnar Peterson","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Gunnar Peterson","raw_affiliation_strings":["Arctec Group, Minneapolis, MN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Arctec Group, Minneapolis, MN, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5004879993"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.08377547,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"2"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.863099992275238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.863099992275238,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.8529999852180481,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.8485000133514404,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7644723653793335},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6279614567756653},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6093098521232605},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.5810781717300415},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.5312663912773132},{"id":"https://openalex.org/keywords/security-bug","display_name":"Security bug","score":0.50348299741745},{"id":"https://openalex.org/keywords/security-through-obscurity","display_name":"Security through obscurity","score":0.49400264024734497},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.4414719343185425},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security analysis","score":0.428960919380188},{"id":"https://openalex.org/keywords/cloud-computing-security","display_name":"Cloud computing security","score":0.42449167370796204},{"id":"https://openalex.org/keywords/security-information-and-event-management","display_name":"Security information and event management","score":0.38761767745018005},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.33265435695648193},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.3207743763923645},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.1001964807510376}],"concepts":[{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7644723653793335},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6279614567756653},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6093098521232605},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.5810781717300415},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.5312663912773132},{"id":"https://openalex.org/C131275738","wikidata":"https://www.wikidata.org/wiki/Q7445023","display_name":"Security bug","level":5,"score":0.50348299741745},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.49400264024734497},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.4414719343185425},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.428960919380188},{"id":"https://openalex.org/C184842701","wikidata":"https://www.wikidata.org/wiki/Q370563","display_name":"Cloud computing security","level":3,"score":0.42449167370796204},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.38761767745018005},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.33265435695648193},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.3207743763923645},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.1001964807510376},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1456362.1456363","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1456362.1456363","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th ACM workshop on Quality of protection","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.47999998927116394}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4384518368","https://openalex.org/W3117252235","https://openalex.org/W4313307479","https://openalex.org/W2097628364","https://openalex.org/W2545999784","https://openalex.org/W3189065608","https://openalex.org/W2293678011","https://openalex.org/W3208699506","https://openalex.org/W2058567876","https://openalex.org/W896362041"],"abstract_inverted_index":{"Robert":[0],"Morris":[1],"Sr.":[2],"has":[3],"noted":[4],"that":[5,20,57],"\"security":[6],"and":[7,30,36,44,68],"especially":[8],"cryptography":[9],"are":[10,38],"essentially":[11],"economic":[12],"issues.\"":[13],"This":[14],"talk":[15],"describes":[16],"the":[17,55,62],"tradeoff":[18],"analysis":[19],"occurs":[21],"on":[22],"a":[23],"daily":[24],"basis":[25],"in":[26],"enterprise":[27],"information":[28],"security":[29,41,50,64],"software":[31,63],"development":[32],"groups:":[33],"what":[34,40,45],"bugs":[35],"flaws":[37],"uncovered,":[39],"capabilities":[42],"exist,":[43],"is-in":[46],"fact-the":[47],"response":[48],"to":[49,59],"problems.":[51],"We":[52],"will":[53],"explore":[54],"patterns":[56],"emerge":[58],"see":[60],"where":[61],"industry":[65],"is":[66],"going":[67],"why.":[69]},"counts_by_year":[{"year":2012,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}