{"id":"https://openalex.org/W4360868548","doi":"https://doi.org/10.1145/3586180","title":"Towards a Greater Understanding of Coordinated Vulnerability Disclosure Policy Documents","display_name":"Towards a Greater Understanding of Coordinated Vulnerability Disclosure Policy Documents","publication_year":2023,"publication_date":"2023-03-24","ids":{"openalex":"https://openalex.org/W4360868548","doi":"https://doi.org/10.1145/3586180"},"language":"en","primary_location":{"id":"doi:10.1145/3586180","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3586180","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3586180","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3586180","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017628278","display_name":"Thomas Walshe","orcid":"https://orcid.org/0000-0002-9805-3156"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Thomas Walshe","raw_affiliation_strings":["University of Oxford","Department of Computer Science, University of Oxford,"],"raw_orcid":"https://orcid.org/0000-0002-9805-3156","affiliations":[{"raw_affiliation_string":"University of Oxford","institution_ids":["https://openalex.org/I40120149"]},{"raw_affiliation_string":"Department of Computer Science, University of Oxford,","institution_ids":["https://openalex.org/I40120149"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090084463","display_name":"Andrew Simpson","orcid":"https://orcid.org/0000-0003-3597-2232"},"institutions":[{"id":"https://openalex.org/I40120149","display_name":"University of Oxford","ror":"https://ror.org/052gg0110","country_code":"GB","type":"education","lineage":["https://openalex.org/I40120149"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Andrew Simpson","raw_affiliation_strings":["University of Oxford","Department of Computer Science, University of Oxford,"],"raw_orcid":"https://orcid.org/0000-0003-3597-2232","affiliations":[{"raw_affiliation_string":"University of Oxford","institution_ids":["https://openalex.org/I40120149"]},{"raw_affiliation_string":"Department of Computer Science, University of Oxford,","institution_ids":["https://openalex.org/I40120149"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I40120149"],"apc_list":null,"apc_paid":null,"fwci":2.4662,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.9057324,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"4","issue":"2","first_page":"1","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9799000024795532,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9799000024795532,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.968500018119812,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12519","display_name":"Cybercrime and Law Enforcement Studies","score":0.9584000110626221,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hacker","display_name":"Hacker","score":0.9686009883880615},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.647435188293457},{"id":"https://openalex.org/keywords/public-relations","display_name":"Public relations","score":0.4907616078853607},{"id":"https://openalex.org/keywords/white-paper","display_name":"White paper","score":0.46675586700439453},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.4418150782585144},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.42872732877731323},{"id":"https://openalex.org/keywords/variety","display_name":"Variety (cybernetics)","score":0.42211657762527466},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.3885437250137329},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.3363329768180847},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.28321248292922974},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.1717103123664856},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.10554957389831543}],"concepts":[{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.9686009883880615},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.647435188293457},{"id":"https://openalex.org/C39549134","wikidata":"https://www.wikidata.org/wiki/Q133080","display_name":"Public relations","level":1,"score":0.4907616078853607},{"id":"https://openalex.org/C2778605646","wikidata":"https://www.wikidata.org/wiki/Q223729","display_name":"White paper","level":2,"score":0.46675586700439453},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.4418150782585144},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.42872732877731323},{"id":"https://openalex.org/C136197465","wikidata":"https://www.wikidata.org/wiki/Q1729295","display_name":"Variety (cybernetics)","level":2,"score":0.42211657762527466},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.3885437250137329},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.3363329768180847},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.28321248292922974},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.1717103123664856},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.10554957389831543}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3586180","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3586180","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3586180","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:ora.ox.ac.uk:uuid:1c36de55-ac22-4281-8bd0-e56bca6f9173","is_oa":false,"landing_page_url":null,"pdf_url":null,"source":{"id":"https://openalex.org/S4306402636","display_name":"Oxford University Research Archive (ORA) (University of Oxford)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I40120149","host_organization_name":"University of Oxford","host_organization_lineage":["https://openalex.org/I40120149"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Symplectic Elements","raw_type":"Journal article"}],"best_oa_location":{"id":"doi:10.1145/3586180","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3586180","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3586180","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10","score":0.550000011920929}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4360868548.pdf","grobid_xml":"https://content.openalex.org/works/W4360868548.grobid-xml"},"referenced_works_count":67,"referenced_works":["https://openalex.org/W1507711477","https://openalex.org/W1533057952","https://openalex.org/W1574680346","https://openalex.org/W1936022305","https://openalex.org/W1967390364","https://openalex.org/W1988915836","https://openalex.org/W2008117952","https://openalex.org/W2020278455","https://openalex.org/W2021348304","https://openalex.org/W2028320509","https://openalex.org/W2114690085","https://openalex.org/W2121765158","https://openalex.org/W2128728535","https://openalex.org/W2149140091","https://openalex.org/W2161778350","https://openalex.org/W2162373348","https://openalex.org/W2167598051","https://openalex.org/W2187089797","https://openalex.org/W2365417624","https://openalex.org/W2553285716","https://openalex.org/W2562251009","https://openalex.org/W2754517384","https://openalex.org/W2788572835","https://openalex.org/W2789242863","https://openalex.org/W2794659749","https://openalex.org/W2808239292","https://openalex.org/W2888597024","https://openalex.org/W2896457183","https://openalex.org/W2946540753","https://openalex.org/W2965373594","https://openalex.org/W2970434416","https://openalex.org/W2999191767","https://openalex.org/W2999930990","https://openalex.org/W3011594683","https://openalex.org/W3013688454","https://openalex.org/W3022734214","https://openalex.org/W3022786120","https://openalex.org/W3034328552","https://openalex.org/W3037458976","https://openalex.org/W3037952601","https://openalex.org/W3043747042","https://openalex.org/W3088911247","https://openalex.org/W3088914184","https://openalex.org/W3092995633","https://openalex.org/W3094306499","https://openalex.org/W3107770003","https://openalex.org/W3112956360","https://openalex.org/W3115462295","https://openalex.org/W3119562784","https://openalex.org/W3121707495","https://openalex.org/W3122745699","https://openalex.org/W3174500806","https://openalex.org/W3197433610","https://openalex.org/W3202879459","https://openalex.org/W4229005866","https://openalex.org/W4229076767","https://openalex.org/W4230575913","https://openalex.org/W4246026233","https://openalex.org/W4283704460","https://openalex.org/W4289672075","https://openalex.org/W4297399555","https://openalex.org/W4298413470","https://openalex.org/W4385245566","https://openalex.org/W6677052679","https://openalex.org/W6739901393","https://openalex.org/W6770750215","https://openalex.org/W6811340617"],"related_works":["https://openalex.org/W2921504876","https://openalex.org/W1982580243","https://openalex.org/W2183730421","https://openalex.org/W2551868243","https://openalex.org/W2348153269","https://openalex.org/W4205613068","https://openalex.org/W3112956360","https://openalex.org/W4286284259","https://openalex.org/W1507118973","https://openalex.org/W2531442779"],"abstract_inverted_index":{"Bug":[0],"bounty":[1,197],"programmes":[2,182,190],"and":[3,150,191,227,242,259,284,324],"vulnerability":[4],"disclosure":[5],"programmes,":[6,15],"collectively":[7],"referred":[8],"to":[9,21,39,49,55,58,76,85,90,104,117,129,212,216,245,287,296,306],"as":[10],"Coordinated":[11],"Vulnerability":[12],"Disclosure":[13],"(CVD)":[14],"open":[16],"up":[17],"an":[18],"organisation\u2019s":[19],"assets":[20],"the":[22,32,52,61,78,81,92,106,111,132,145,158,175,180,206,222,250,264,269,290,322],"inquisitive":[23],"gaze":[24],"of":[25,122,144,160,183,185,221,234,249,263,272,277,292,302,331],"(often":[26],"eager)":[27],"white-hat":[28],"hackers.":[29],"Motivated":[30],"by":[31,95],"question":[33],"What":[34],"information":[35,53,283,285],"do":[36],"organisations":[37,127,202,273],"convey":[38,205],"hackers":[40,56,97,118,215,255,293],"through":[41,119],"public":[42],"CVD":[43,181,332],"policy":[44,138,176,238,270,314],"documents?":[45],",":[46],"we":[47,70,140,310],"aim":[48],"better":[50,130],"understand":[51,91,105,131],"available":[54],"wishing":[57,128],"participate":[59],"in":[60,67,80,110,153,268,299],"search":[62],"for":[63,126,258],"vulnerabilities.":[64,261],"As":[65],"such,":[66],"this":[68],"article":[69],"consider":[71],"three":[72],"key":[73,279],"issues.":[74],"First,":[75],"address":[77],"differences":[79],"legal":[82,228,282],"language":[83,169],"communicated":[84,116],"hackers,":[86,213],"it":[87,101],"is":[88,102,240,294],"necessary":[89],"formal":[93,207],"constraints":[94,113,208,252],"which":[96],"must":[98],"abide.":[99],"Second,":[100],"beneficial":[103],"variation":[107],"that":[108,114,135,178,201,209,224,316],"exists":[109],"informal":[112,251],"are":[115,210],"a":[120,161,218,232,246,300,328],"variety":[121],"institutional":[123,265],"elements.":[124],"Third,":[125],"commonplace":[133],"elements":[134,266],"form":[136],"current":[137],"documents,":[139],"offer":[141],"broad":[142,329],"analysis":[143],"components":[146,239],"frequently":[147],"included":[148,267],"therein":[149],"identify":[151],"gaps":[152],"programme":[154,333],"policies.":[155],"We":[156,199],"report":[157],"results":[159],"quantitative":[162],"study,":[163],"leveraging":[164],"deep":[165,219],"learning":[166],"based":[167],"natural":[168],"processing":[170],"models,":[171],"providing":[172],"insights":[173],"into":[174],"documents":[177,271],"accompany":[179],"thousands":[184],"organisations,":[186],"covering":[187,327],"both":[188,321],"stand-alone":[189],"those":[192],"hosted":[193],"on":[194,289],"13":[195],"bug":[196],"programmes.":[198],"found":[200,295],"often":[203],"inadequately":[204],"applicable":[211],"requiring":[214],"have":[217],"understanding":[220,248],"laws":[223],"underpin":[225],"safe":[226],"security":[229],"research.":[230],"Furthermore,":[231],"lack":[233],"standardisation":[235],"across":[236],"similar":[237],"prevalent,":[241],"may":[243],"lead":[244],"decreased":[247],"placed":[253],"upon":[254],"when":[256],"searching":[257],"disclosing":[260],"Analysis":[262],"reveals":[274],"insufficient":[275],"inclusion":[276],"many":[278],"components.":[280],"Namely,":[281],"pertaining":[286],"restrictions":[288],"backgrounds":[291],"be":[297],"absent":[298],"majority":[301],"policies":[303],"analysed.":[304],"Finally,":[305],"assist":[307],"ongoing":[308],"research,":[309],"provide":[311],"novel":[312],"annotated":[313],"datasets":[315],"include":[317],"human-labelled":[318],"annotations":[319],"at":[320],"sentence":[323],"paragraph":[325],"level,":[326],"range":[330],"backgrounds.":[334]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2025-10-10T00:00:00"}