Vulnerability severity scoring and bounties: why the disconnect?-Reference-Cited by-同舟云学术

Vulnerability severity scoring and bounties: why the disconnect?

Published:2016-11-13 Issue: Volume: Page:
ISSN:
Container-title:Proceedings of the 2nd International Workshop on Software Analytics
language:
Short-container-title:

Author:

Munaiah Nuthan¹,Meneely Andrew¹

Affiliation:

1. Rochester Institute of Technology, USA

Publisher

ACM

Link

https://dl.acm.org/doi/pdf/10.1145/2989238.2989239

Reference31 articles.

1. Coders’ Rights Project Vulnerability Reporting FAQ. https://www.eff.org/issues/coders/ vulnerability-reporting-faq. Accessed: 2016-04-03. Coders’ Rights Project Vulnerability Reporting FAQ. https://www.eff.org/issues/coders/ vulnerability-reporting-faq. Accessed: 2016-04-03.

2. Common Vulnerability Scoring System (CVSS-SIG). https://www.first.org/cvss. Accessed: 2016-03-12. Common Vulnerability Scoring System (CVSS-SIG). https://www.first.org/cvss. Accessed: 2016-03-12.

3. Severity Ratings - Red Hat Customer Portal. https://access.redhat.com/security/updates/ classification. Accessed: 2016-08-14. Severity Ratings - Red Hat Customer Portal. https://access.redhat.com/security/updates/ classification. Accessed: 2016-08-14.

4. IEEE Standard Classification for Software Anomalies. IEEE Std 1044-2009 (Revision of IEEE Std 1044-1993) pages 1–25 Jan 2010. IEEE Standard Classification for Software Anomalies. IEEE Std 1044-2009 (Revision of IEEE Std 1044-1993) pages 1–25 Jan 2010.

5. Software Vulnerability Markets: Discoverers and Buyers. Int. Journal Computer, Information;Algarni A.;Systems and Control Engineering,2014

Cited by 22 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Reputation Gaming in Crowd Technical Knowledge Sharing;ACM Transactions on Software Engineering and Methodology;2024-09-04

2. Methodological Advancements in Standardizing Blockchain Assessment;IEEE Access;2024

3. Merchants of Vulnerabilities: How Bug Bounty Programs Benefit Software Vendors;SSRN Electronic Journal;2024

4. NUVER: Network Based Vulnerability Visualizer;2023 IEEE 30th Annual Software Technology Conference (STC);2023-09-25

5. Software Development Analytics in Practice: A Systematic Literature Review;Archives of Computational Methods in Engineering;2023-01-10