Fetching the paper…
Reading the bibliography…
Assessing the exploitability of software vulnerabilities at the time of disclosure is difficult and error-prone, as features extracted via technical analysis by existing metrics are poor predictors for exploit development.
Multiple comparisons among means
O. J. Dunn · 1961
Earlier work this paper cites.
Time-dependent roc curves for censored survival data and a diagnostic marker
P. J. Heagerty, T. Lumley, and M. S. Pepe · 2000
Earlier work this paper cites.
Simple, robust, scalable semi-supervised learning via expectation regularization
G. S. Mann and A. McCallum · 2007
Earlier work this paper cites.
HackerOne, 30 March 2009
Hackerone - disclosure guidelines · 2009
Earlier work this paper cites.
AlienVault, 30 March 2009
Alienvault otx · 2009
Earlier work this paper cites.
RedHat, 30 March 2009
Severity ratings · 2009
Earlier work this paper cites.
Reuters, 30 March 2009
Microsoft correctly predicts reliable exploits just 27 · 2009
Earlier work this paper cites.
Beyond heuristics: learning to classify vulnerabilities and predict exploits
M. Bozorgi, L. K. Saul, S. Savage, and G. M. Voelker · 2010
Earlier work this paper cites.
A preliminary analysis of vulnerability scores for attacks in wild
L. Allodi and F. Massacci · 2012
Earlier work this paper cites.
Before we knew it: an empirical study of zero-day attacks in the real world
L. Bilge and T. Dumitra s · 2012
Earlier work this paper cites.
A large scale exploratory analysis of software vulnerability life cycles
M. Shahzad, M. Z. Shafiq, and A. X. Liu · 2012
Earlier work this paper cites.
Exploitability/priority index rating systems (approaches, value, and limitations), 2013
C. Eiram · 2013
Earlier work this paper cites.
Classification in the presence of label noise: a survey
B. Frénay and M. Verleysen · 2013
Earlier work this paper cites.
Sok: Eternal war in memory
L. Szekeres, M. Payer, T. Wei, and D. Song · 2013
Earlier work this paper cites.
Comparing vulnerability severity and exploits using case-control studies
L. Allodi and F. Massacci · 2014
Earlier work this paper cites.
Distributed representations of sentences and documents
Q. Le and T. Mikolov · 2014
Earlier work this paper cites.
Automatically detecting vulnerable websites before they turn malicious
K. Soska and N. Christin · 2014
Earlier work this paper cites.
Modeling and discovering vulnerabilities with code property graphs
F. Yamaguchi, N. Golde, D. Arp, and K. Rieck · 2014
Earlier work this paper cites.
De-anonymizing programmers via code stylometry
A. Caliskan-Islam, R. Harang, A. Liu, A. Narayanan, C. Voss, F. Yamaguchi, and R. Greenstadt · 2015
Earlier work this paper cites.
Cloudy with a chance of breach: Forecasting cyber security incidents
Y. Liu, A. Sarabi, J. Zhang, P. Naghizadeh, M. Karir, M. Bailey, and M. Liu · 2015
Earlier work this paper cites.
The attack of the clones: A study of the impact of shared code on vulnerability patching
A. Nappa, R. Johnson, L. Bilge, J. Caballero, and T. Dumitra s · 2015
Earlier work this paper cites.
Vulnerability disclosure in the age of social media: Exploiting Twitter for predicting real-world exploits
C. Sabottke, O. Suciu, and T. Dumitra s · 2015
Earlier work this paper cites.
Learning from massive noisy labeled data for image classification
T. Xiao, T. Xia, Y. Yang, C. Huang, and X. Wang · 2015
Cited alongside, same era.
Android malware detection with weak ground truth data
J. DeLoach, D. Caragea, and X. Ou · 2016
Cited alongside, same era.
Empirical analysis of the relationship between cc and sloc in a large corpus of java methods and c functions
D. Landman, A. Serebrenik, E. Bouwers, and J. J. Vinju · 2016
Cited alongside, same era.
Revisiting classifier two-sample tests
D. Lopez-Paz and M. Oquab · 2016
Cited alongside, same era.
Learning from binary labels with instance-dependent corruption
A. K. Menon, B. Van Rooyen, and N. Natarajan · 2016
Cited alongside, same era.
{ \{ FUZE } \} : Towards facilitating exploit generation for kernel use-after-free vulnerabilities
W. Wu, Y. Chen, J. Xu, X. Xing, X. Gong, and W. Zou · 2018
Later among the works it cites.
From patching delays to infection symptoms: using risk profiles for an early discovery of vulnerabilities exploited in the wild
C. Xiao, A. Sarabi, Y. Liu, B. Li, M. Liu, and T. Dumitras · 2018
Later among the works it cites.
Recent windows alpc zero-day has been exploited in the wild for almost a week
ZDNet · 2018
Later among the works it cites.
Securityfocus
Bugtraq · 2019
Later among the works it cites.
Using twitter to predict when vulnerabilities will be exploited
H. Chen, R. Liu, N. Park, and V. Subrahmanian · 2019
Later among the works it cites.
D2 exploitation pack
D2 Security · 2019
Later among the works it cites.
alphaXiv searches the wider corpus for related work and actual follow-ups.
alphaXiv is searching for related work…
Economic factors of vulnerability trade and exploitation
L. Allodi · 2017
Cited alongside, same era.
How shall we play a game?: a game-theoretical model for cyber-warfare games
T. Bao, Y. Shoshitaishvili, R. Wang, C. Kruegel, G. Vigna, and D. Brumley · 2017
Cited alongside, same era.
Your exploit is mine: Automatic shellcode transplant for remote exploits
T. Bao, R. Wang, Y. Shoshitaishvili, and D. Brumley · 2017
Cited alongside, same era.
Weird machines, exploitability, and provable unexploitability
T. F. Dullien · 2017
Cited alongside, same era.
Vulnerabilities equities policy and process for the united states government, 2017
T. W. House · 2017
Cited alongside, same era.
A large-scale empirical study of security patches
F. Li and V. Paxson · 2017
Cited alongside, same era.
Making deep neural networks robust to label noise: A loss correction approach
G. Patrini, A. Rozza, A. Krishna Menon, R. Nock, and L. Qu · 2017
Cited alongside, same era.
The exploit database
ExploitDB · 2019
Later among the works it cites.
Improving vulnerability remediation through better exploit prediction
J. Jacobs, S. Romanosky, I. Adjerid, and W. Baker · 2019
Later among the works it cites.
Contagio dump
Mila Parkour · 2019
Later among the works it cites.
Cve-2017-0144
MITRE CVE · 2019
Later among the works it cites.
The metasploit framework
Rapid7 · 2019
Later among the works it cites.
Vulnerability center
SkyBox · 2019
Later among the works it cites.
Symantec threat explorer
Symantec Corporation · 2019
Later among the works it cites.
Tenable research advisories
Tenable · 2019
Later among the works it cites.
Tenable, 30 March 2019
Severity vs. vpr · 2019
Later among the works it cites.
Assessing security risk of your containers with vulnerability advisor
Y. Watanabe · 2019
Later among the works it cites.
Microsoft, 30 March 2020
Microsoft exploitability index · 2020
Later among the works it cites.
Unauthorized access of fireeye red team tools
FireEye · 2020
Later among the works it cites.
linguist
GitHub · 2020
Later among the works it cites.
Compiler::parser
MetaCPAN · 2020
Later among the works it cites.
Exploit prediction scoring system (epss)
J. Jacobs, S. Romanosky, B. Edwards, I. Adjerid, and M. Roytman · 2021
Closest in time.