{"id":"https://openalex.org/W4312798241","doi":"https://doi.org/10.1145/3524489.3527298","title":"Predicting the severity and exploitability of vulnerability reports using convolutional neural nets","display_name":"Predicting the severity and exploitability of vulnerability reports using convolutional neural nets","publication_year":2022,"publication_date":"2022-05-16","ids":{"openalex":"https://openalex.org/W4312798241","doi":"https://doi.org/10.1145/3524489.3527298"},"language":"en","primary_location":{"id":"doi:10.1145/3524489.3527298","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3524489.3527298","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd International Workshop on Engineering and Cybersecurity of Critical Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040805050","display_name":"Ahmet Okutan","orcid":"https://orcid.org/0000-0001-6664-515X"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ahmet Okutan","raw_affiliation_strings":["Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5088410123","display_name":"Mehdi Mirakhorli","orcid":"https://orcid.org/0000-0003-3470-6856"},"institutions":[{"id":"https://openalex.org/I155173764","display_name":"Rochester Institute of Technology","ror":"https://ror.org/00v4yb702","country_code":"US","type":"education","lineage":["https://openalex.org/I155173764"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mehdi Mirakhorli","raw_affiliation_strings":["Rochester Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Rochester Institute of Technology","institution_ids":["https://openalex.org/I155173764"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I155173764"],"apc_list":null,"apc_paid":null,"fwci":1.8457,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.88309724,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9988999962806702,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8700520396232605},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.7198377251625061},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.7137429118156433},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5904713869094849},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4700148403644562},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3831009268760681},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.2541552186012268}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8700520396232605},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.7198377251625061},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.7137429118156433},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5904713869094849},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4700148403644562},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3831009268760681},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2541552186012268}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3524489.3527298","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3524489.3527298","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 3rd International Workshop on Engineering and Cybersecurity of Critical Systems","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth","score":0.44999998807907104}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":17,"referenced_works":["https://openalex.org/W1971733255","https://openalex.org/W2009470162","https://openalex.org/W2022913925","https://openalex.org/W2071513314","https://openalex.org/W2155055334","https://openalex.org/W2291920259","https://openalex.org/W2294973055","https://openalex.org/W2341612996","https://openalex.org/W2526050071","https://openalex.org/W2608093196","https://openalex.org/W2775899375","https://openalex.org/W2793427727","https://openalex.org/W2914304175","https://openalex.org/W2940563585","https://openalex.org/W3007318604","https://openalex.org/W3016199683","https://openalex.org/W3100479002"],"related_works":["https://openalex.org/W2906845177","https://openalex.org/W4200107511","https://openalex.org/W2891427086","https://openalex.org/W2961085424","https://openalex.org/W1968625315","https://openalex.org/W4306674287","https://openalex.org/W3046775127","https://openalex.org/W3107602296","https://openalex.org/W3170094116","https://openalex.org/W4386462264"],"abstract_inverted_index":{"Common":[0,31,151],"Vulnerability":[1,8,32],"and":[2,18,48,62,74,94,105,131,135,163,179,186,204],"Exposure":[3],"(CVE)":[4],"reports":[5],"published":[6,159],"by":[7,142,160,167,219],"Management":[9],"Systems":[10],"(VMSs)":[11],"are":[12],"used":[13],"to":[14,36,40,42,68,119,124,174,214],"evaluate":[15,43],"the":[16,30,71,77,102,126,129,150,161,164,176,187,193,205,215,220],"severity":[17,104,130,178,194],"exploitability":[19,106,132,139,180,207,216],"of":[20,79,107,128,133,181,195],"software":[21],"vulnerabilities.":[22],"Public":[23],"vulnerability":[24,55],"databases":[25,56],"such":[26],"as":[27],"NVD":[28,162],"uses":[29,114],"Scoring":[33],"System":[34],"(CVSS)":[35],"assign":[37],"various":[38],"scores":[39],"CVEs":[41,196],"their":[44],"base":[45,177],"severity,":[46],"impact,":[47],"exploitability.":[49],"Previous":[50],"studies":[51],"have":[52],"shown":[53,85],"that":[54,86,192],"rely":[57],"on":[58,91,149],"a":[59,137,144],"manual,":[60],"labor-intensive":[61],"error-prone":[63],"process":[64],"which":[65],"may":[66,95],"lead":[67],"inconsistencies":[69],"in":[70,76,100,109],"CVE":[72,157],"data":[73],"delays":[75],"releasing":[78],"new":[80,138],"CVEs.":[81,182],"Furthermore,":[82],"it":[83,170],"was":[84],"CVSS":[87],"scoring":[88,140,208,217],"is":[89],"based":[90,148],"complex":[92],"calculations":[93],"not":[96],"be":[97,198],"accurate":[98],"enough":[99],"assessing":[101],"potential":[103],"vulnerabilities":[108],"real":[110],"life.":[111],"This":[112],"work":[113],"Convolutional":[115],"Neural":[116],"Networks":[117],"(CNN)":[118],"train":[120],"text":[121],"classification":[122],"models":[123,173],"automate":[125],"prediction":[127],"CVEs,":[134],"proposes":[136],"method":[141,209],"creating":[143],"Product":[145,152],"Hygiene":[146],"Index":[147],"Enumeration":[153],"(CPE)":[154],"catalog.":[155],"Using":[156],"descriptions":[158],"exploits":[165],"identified":[166],"exploit":[168],"databases,":[169],"trains":[171],"CNN":[172],"predict":[175],"Preliminary":[183],"experiment":[184],"results":[185,212],"conducted":[188],"case":[189],"study":[190],"indicate":[191],"can":[197],"predicted":[199],"automatically":[200],"with":[201],"high":[202],"confidences,":[203],"proposed":[206],"achieves":[210],"better":[211],"compared":[213],"provided":[218],"NVD.":[221]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":5},{"year":2023,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}