{"id":"https://openalex.org/W2592072912","doi":"https://doi.org/10.2298/csis161010010r","title":"Modeling the delivery of security advisories and CVEs","display_name":"Modeling the delivery of security advisories and CVEs","publication_year":2017,"publication_date":"2017-01-01","ids":{"openalex":"https://openalex.org/W2592072912","doi":"https://doi.org/10.2298/csis161010010r","mag":"2592072912"},"language":"en","primary_location":{"id":"doi:10.2298/csis161010010r","is_oa":true,"landing_page_url":"https://doi.org/10.2298/csis161010010r","pdf_url":"http://www.doiserbia.nb.rs/ft.aspx?id=1820-02141700010R","source":{"id":"https://openalex.org/S206939107","display_name":"Computer Science and Information Systems","issn_l":"1820-0214","issn":["1820-0214","2406-1018"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310321031","host_organization_name":"ComSIS Consortium","host_organization_lineage":["https://openalex.org/P4310321031"],"host_organization_lineage_names":["ComSIS Consortium"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Science and Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"http://www.doiserbia.nb.rs/ft.aspx?id=1820-02141700010R","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045061250","display_name":"Jukka Ruohonen","orcid":"https://orcid.org/0000-0001-5147-3084"},"institutions":[{"id":"https://openalex.org/I155660961","display_name":"University of Turku","ror":"https://ror.org/05vghhr25","country_code":"FI","type":"education","lineage":["https://openalex.org/I155660961"]},{"id":"https://openalex.org/I16231767","display_name":"Turku University of Applied Sciences","ror":"https://ror.org/04s0yt949","country_code":"FI","type":"education","lineage":["https://openalex.org/I16231767"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Jukka Ruohonen","raw_affiliation_strings":["University of Turku, Department of Information Technology, Turun yliopisto, Finland","Department of Information Technology, University of Turku, FI-20014 Turun yliopisto, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Turku, Department of Information Technology, Turun yliopisto, Finland","institution_ids":["https://openalex.org/I155660961","https://openalex.org/I16231767"]},{"raw_affiliation_string":"Department of Information Technology, University of Turku, FI-20014 Turun yliopisto, Finland","institution_ids":["https://openalex.org/I155660961"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5006523717","display_name":"Sami Hyrynsalmi","orcid":"https://orcid.org/0000-0002-5073-3750"},"institutions":[{"id":"https://openalex.org/I155660961","display_name":"University of Turku","ror":"https://ror.org/05vghhr25","country_code":"FI","type":"education","lineage":["https://openalex.org/I155660961"]},{"id":"https://openalex.org/I4210133110","display_name":"Tampere University","ror":null,"country_code":"FI","type":null,"lineage":["https://openalex.org/I4210133110"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Sami Hyrynsalmi","raw_affiliation_strings":["University of Turku, Department of Information Technology, Turun yliopisto, Finland + Tampere University of Technology, Pori Department, Pori, Finland","Pori Department, Tampere University of Technology, P.O. Box 300, FI-28101 Pori, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Turku, Department of Information Technology, Turun yliopisto, Finland + Tampere University of Technology, Pori Department, Pori, Finland","institution_ids":["https://openalex.org/I155660961","https://openalex.org/I4210133110"]},{"raw_affiliation_string":"Pori Department, Tampere University of Technology, P.O. Box 300, FI-28101 Pori, Finland","institution_ids":["https://openalex.org/I4210133110"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029023235","display_name":"Ville Lepp\u00e4nen","orcid":"https://orcid.org/0000-0001-5296-677X"},"institutions":[{"id":"https://openalex.org/I155660961","display_name":"University of Turku","ror":"https://ror.org/05vghhr25","country_code":"FI","type":"education","lineage":["https://openalex.org/I155660961"]},{"id":"https://openalex.org/I16231767","display_name":"Turku University of Applied Sciences","ror":"https://ror.org/04s0yt949","country_code":"FI","type":"education","lineage":["https://openalex.org/I16231767"]}],"countries":["FI"],"is_corresponding":true,"raw_author_name":"Ville Lepp\u00e4nen","raw_affiliation_strings":["University of Turku, Department of Information Technology, Turun yliopisto, Finland","Department of Information Technology, University of Turku, FI-20014 Turun yliopisto, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Turku, Department of Information Technology, Turun yliopisto, Finland","institution_ids":["https://openalex.org/I155660961","https://openalex.org/I16231767"]},{"raw_affiliation_string":"Department of Information Technology, University of Turku, FI-20014 Turun yliopisto, Finland","institution_ids":["https://openalex.org/I155660961"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5029023235"],"corresponding_institution_ids":["https://openalex.org/I155660961","https://openalex.org/I16231767"],"apc_list":null,"apc_paid":null,"fwci":3.1551,"has_fulltext":true,"cited_by_count":9,"citation_normalized_percentile":{"value":0.92991512,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":"14","issue":"2","first_page":"537","last_page":"555"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9653000235557556,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9653000235557556,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8178545236587524},{"id":"https://openalex.org/keywords/turnaround-time","display_name":"Turnaround time","score":0.7081859707832336},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.6724025011062622},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5549448728561401},{"id":"https://openalex.org/keywords/product","display_name":"Product (mathematics)","score":0.4726373553276062},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37470513582229614},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.1280970573425293}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8178545236587524},{"id":"https://openalex.org/C176553487","wikidata":"https://www.wikidata.org/wiki/Q7855819","display_name":"Turnaround time","level":2,"score":0.7081859707832336},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.6724025011062622},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5549448728561401},{"id":"https://openalex.org/C90673727","wikidata":"https://www.wikidata.org/wiki/Q901718","display_name":"Product (mathematics)","level":2,"score":0.4726373553276062},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37470513582229614},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.1280970573425293},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.2298/csis161010010r","is_oa":true,"landing_page_url":"https://doi.org/10.2298/csis161010010r","pdf_url":"http://www.doiserbia.nb.rs/ft.aspx?id=1820-02141700010R","source":{"id":"https://openalex.org/S206939107","display_name":"Computer Science and Information Systems","issn_l":"1820-0214","issn":["1820-0214","2406-1018"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310321031","host_organization_name":"ComSIS Consortium","host_organization_lineage":["https://openalex.org/P4310321031"],"host_organization_lineage_names":["ComSIS Consortium"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Science and Information Systems","raw_type":"journal-article"},{"id":"pmh:oai:doiserbia:1820-02141700010R","is_oa":false,"landing_page_url":"http://doi.org/10.2298/CSIS161010010R","pdf_url":null,"source":{"id":"https://openalex.org/S4306400515","display_name":"Digital Object Identifier (DOI) Repository Serbia (National Library of Serbia)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210142455","host_organization_name":"National Library of Serbia","host_organization_lineage":["https://openalex.org/I4210142455"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"","raw_type":". (00) 10-10"},{"id":"pmh:oai:trepo.tuni.fi:10024/214079","is_oa":false,"landing_page_url":"https://trepo.tuni.fi/handle/10024/214079","pdf_url":null,"source":{"id":"https://openalex.org/S4306401860","display_name":"Tampere University Institutional Repository (Tampere University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I150589677","host_organization_name":"Tampere University of Applied Sciences","host_organization_lineage":["https://openalex.org/I150589677"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"publishedVersion"}],"best_oa_location":{"id":"doi:10.2298/csis161010010r","is_oa":true,"landing_page_url":"https://doi.org/10.2298/csis161010010r","pdf_url":"http://www.doiserbia.nb.rs/ft.aspx?id=1820-02141700010R","source":{"id":"https://openalex.org/S206939107","display_name":"Computer Science and Information Systems","issn_l":"1820-0214","issn":["1820-0214","2406-1018"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310321031","host_organization_name":"ComSIS Consortium","host_organization_lineage":["https://openalex.org/P4310321031"],"host_organization_lineage_names":["ComSIS Consortium"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Science and Information Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.4099999964237213}],"awards":[],"funders":[{"id":"https://openalex.org/F4320321855","display_name":"Tekes","ror":"https://ror.org/02ag8cq23"},{"id":"https://openalex.org/F4320326814","display_name":"Digital, Internet, Materials and Engineering Co-Creation","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W2592072912.pdf","grobid_xml":"https://content.openalex.org/works/W2592072912.grobid-xml"},"referenced_works_count":28,"referenced_works":["https://openalex.org/W24762504","https://openalex.org/W150078352","https://openalex.org/W806202468","https://openalex.org/W1513618424","https://openalex.org/W1683889830","https://openalex.org/W1873213403","https://openalex.org/W1964593071","https://openalex.org/W1979872195","https://openalex.org/W1980595883","https://openalex.org/W2040420981","https://openalex.org/W2060831261","https://openalex.org/W2069910799","https://openalex.org/W2085426790","https://openalex.org/W2108583778","https://openalex.org/W2121713513","https://openalex.org/W2131624435","https://openalex.org/W2177986285","https://openalex.org/W2182001525","https://openalex.org/W2274324447","https://openalex.org/W2282575800","https://openalex.org/W2466444764","https://openalex.org/W2513861733","https://openalex.org/W2516920790","https://openalex.org/W2625060989","https://openalex.org/W3141872514","https://openalex.org/W4243120570","https://openalex.org/W4248974559","https://openalex.org/W7081702151"],"related_works":["https://openalex.org/W2331043530","https://openalex.org/W3125854234","https://openalex.org/W2362011720","https://openalex.org/W2030496847","https://openalex.org/W2253962881","https://openalex.org/W2116998925","https://openalex.org/W2379513284","https://openalex.org/W1657769681","https://openalex.org/W4200107337","https://openalex.org/W2387065918"],"abstract_inverted_index":{"This":[0],"empirical":[1],"paper":[2,85],"models":[3],"three":[4,28,57],"structural":[5,29],"factors":[6,30,58],"that":[7],"are":[8,59],"hypothesized":[9],"to":[10,61,97],"affect":[11],"the":[12,16,37,69,84,93],"turnaround":[13,70],"times":[14,71],"between":[15],"publication":[17],"of":[18,39,44,50,76],"security":[19],"advisories":[20],"and":[21,24,47,79],"Common":[22],"Vulnerabilities":[23],"Exposures":[25],"(CVEs).":[26],"The":[27],"are:":[31],"(i)":[32],"software":[33],"product":[34],"age":[35],"at":[36],"time":[38],"advisory":[40],"release;":[41],"(ii)":[42],"severity":[43],"vulnerabilities":[45],"coordinated;":[46],"(iii)":[48],"amounts":[49],"CVEs":[51],"referenced":[52],"in":[53,72],"advisories.":[54],"Although":[55],"all":[56],"observed":[60],"provide":[62],"only":[63],"limited":[64],"information":[65],"for":[66,90],"statistically":[67],"predicting":[68],"a":[73],"dataset":[74],"comprised":[75],"Microsoft,":[77],"openSUSE,":[78],"Ubuntu":[80],"operating":[81],"system":[82],"products,":[83],"outlines":[86],"new":[87],"research":[88],"directions":[89],"better":[91],"understanding":[92],"current":[94],"problems":[95],"related":[96],"vulnerability":[98],"coordination.":[99]},"counts_by_year":[{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":3},{"year":2019,"cited_by_count":1},{"year":2018,"cited_by_count":2},{"year":2017,"cited_by_count":2}],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-10-10T00:00:00"}
