{"id":"https://openalex.org/W3193977931","doi":"https://doi.org/10.1145/3465481.3470039","title":"A Recommender System for Tracking Vulnerabilities","display_name":"A Recommender System for Tracking Vulnerabilities","publication_year":2021,"publication_date":"2021-08-16","ids":{"openalex":"https://openalex.org/W3193977931","doi":"https://doi.org/10.1145/3465481.3470039","mag":"3193977931"},"language":"en","primary_location":{"id":"doi:10.1145/3465481.3470039","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465481.3470039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009392352","display_name":"Philip Huff","orcid":"https://orcid.org/0000-0003-0869-2147"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Philip Huff","raw_affiliation_strings":["University of Arkansas, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas, US","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010750132","display_name":"Kylie McClanahan","orcid":"https://orcid.org/0000-0002-7809-6554"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Kylie McClanahan","raw_affiliation_strings":["University of Arkansas, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas, US","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018171436","display_name":"Thao Le","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Thao Le","raw_affiliation_strings":["Bastazo, Inc., US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Bastazo, Inc., US","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100670306","display_name":"Qinghua Li","orcid":"https://orcid.org/0000-0003-3125-1024"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Qinghua Li","raw_affiliation_strings":["University of Arkansas, US"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Arkansas, US","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":18,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8186883926391602},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.6342243552207947},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.6208966374397278},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.5287525057792664},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.5135571956634521},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.48403114080429077},{"id":"https://openalex.org/keywords/vendor","display_name":"Vendor","score":0.48053106665611267},{"id":"https://openalex.org/keywords/product","display_name":"Product (mathematics)","score":0.43429917097091675},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.36530011892318726},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.36255717277526855},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.3245750665664673},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.2963980436325073},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.2142447531223297},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.21025356650352478}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8186883926391602},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.6342243552207947},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.6208966374397278},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.5287525057792664},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.5135571956634521},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.48403114080429077},{"id":"https://openalex.org/C2777338717","wikidata":"https://www.wikidata.org/wiki/Q1762621","display_name":"Vendor","level":2,"score":0.48053106665611267},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.43429917097091675},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.36530011892318726},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.36255717277526855},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.3245750665664673},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.2963980436325073},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.2142447531223297},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.21025356650352478},{"id":"https://openalex.org/C542102704","wikidata":"https://www.wikidata.org/wiki/Q183257","display_name":"Psychotherapist","level":1,"score":0.0},{"id":"https://openalex.org/C137176749","wikidata":"https://www.wikidata.org/wiki/Q4105337","display_name":"Psychological resilience","level":2,"score":0.0},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.0},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.0},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C162853370","wikidata":"https://www.wikidata.org/wiki/Q39809","display_name":"Marketing","level":1,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3465481.3470039","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3465481.3470039","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 16th International Conference on Availability, Reliability and Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.44999998807907104,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2022167038","https://openalex.org/W2140855819","https://openalex.org/W2341865734","https://openalex.org/W2623492889","https://openalex.org/W2748690817","https://openalex.org/W2775899375","https://openalex.org/W2804264889","https://openalex.org/W2948226814","https://openalex.org/W2950577311","https://openalex.org/W2950742848","https://openalex.org/W3009618936","https://openalex.org/W3047932800","https://openalex.org/W3100479002","https://openalex.org/W4232648333"],"related_works":["https://openalex.org/W922414892","https://openalex.org/W2185499427","https://openalex.org/W2393340519","https://openalex.org/W4298219515","https://openalex.org/W2392503306","https://openalex.org/W2147569372","https://openalex.org/W2371301679","https://openalex.org/W4200107511","https://openalex.org/W3041665175","https://openalex.org/W3200895730"],"abstract_inverted_index":{"Mitigating":[0],"vulnerabilities":[1,8],"in":[2,55],"software":[3,12,30,34,46,65,86,123,155],"requires":[4],"first":[5],"identifying":[6,102],"the":[7,43,150],"with":[9],"an":[10],"organization\u2019s":[11],"assets.":[13],"This":[14,92],"seemingly":[15],"trivial":[16],"task":[17],"involves":[18],"maintaining":[19],"vendor":[20],"product":[21,66,156],"vulnerability":[22,47,127,157],"notification":[23],"for":[24,76,98,122,154],"a":[25,63,73,110,116,136],"kludge":[26],"of":[27,120,138],"hardware":[28,84],"and":[29,38,53,59,85,101,129,144],"packages":[31],"from":[32,95],"innumerable":[33],"publishers,":[35],"coding":[36],"projects,":[37],"third-party":[39],"package":[40,87],"managers.":[41],"On":[42],"other":[44],"hand,":[45],"databases":[48],"are":[49],"often":[50],"consistently":[51],"reported":[52],"categorized":[54],"clean,":[56],"standard":[57],"formats":[58],"neatly":[60],"tied":[61],"to":[62,81,89,113,125,147],"common":[64],"enumerator":[67],"(i.e.,":[68],"CPE).":[69],"Currently":[70],"it":[71],"is":[72],"heavy":[74],"workload":[75],"cybersecurity":[77],"analysts":[78],"at":[79],"organizations":[80,94],"match":[82],"their":[83],"inventory":[88],"target":[90],"CPEs.":[91],"hinders":[93],"getting":[96],"notifications":[97],"new":[99],"vulnerabilities,":[100],"applicable":[103],"vulnerabilities.":[104],"In":[105],"this":[106],"paper,":[107],"we":[108],"present":[109],"recommender":[111,133],"system":[112,134],"automatically":[114],"identify":[115],"minimal":[117],"candidate":[118],"set":[119],"CPEs":[121],"names":[124],"improve":[126],"identification":[128],"alerting":[130],"accuracy.":[131],"The":[132],"uses":[135],"pipeline":[137],"natural":[139],"language":[140],"processing,":[141],"fuzzy":[142],"matching,":[143],"machine":[145],"learning":[146],"significantly":[148],"reduce":[149],"human":[151],"effort":[152],"needed":[153],"matching.":[158]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}