1. Arora, A., Telang, R., Xu, H., 2004a. Optimal Policy for Software Vulnerability Disclosure, Working paper, Carnegie Mellon University.
2. Arora, A., Krishnan, R., Nandkumar, A., Telang, R., Yang, Y., 2004b. Impact of Vulnerability Disclosure and Patch Availability – an Empirical Analysis. In: Third Workshop on the Economics of Information Security, Minneapolis. MN.
3. Research note – sell first, fix later: impact of patching on software quality;Arora;Management Science,2005
4. Bank, D., 2004. MyDoom worm renews debate on cyber-ethics, The Wall Street Journal, November 11, 2004.
5. Beattie, S., Arnold, S., Cowan, C., Wagle, P., Wright, C., Shostack, A., 2002. Timing the Application of Security Patches for Optimal Uptime. In: Proceedings of LISA 2002: Sixteenth Systems Administration Conference.