{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T16:27:37Z","timestamp":1783096057264,"version":"3.54.6"},"reference-count":55,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"4","license":[{"start":{"date-parts":[[2023,7,1]],"date-time":"2023-07-01T00:00:00Z","timestamp":1688169600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,7,1]],"date-time":"2023-07-01T00:00:00Z","timestamp":1688169600000},"content-version":"am","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,7,1]],"date-time":"2023-07-01T00:00:00Z","timestamp":1688169600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,7,1]],"date-time":"2023-07-01T00:00:00Z","timestamp":1688169600000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U1936211"],"award-info":[{"award-number":["U1936211"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2122631"],"award-info":[{"award-number":["2122631"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100008982","name":"National Science Foundation","doi-asserted-by":"publisher","award":["2115134"],"award-info":[{"award-number":["2115134"]}],"id":[{"id":"10.13039\/501100008982","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["W911NF-17-1-0566"],"award-info":[{"award-number":["W911NF-17-1-0566"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/100000183","name":"Army Research Office","doi-asserted-by":"publisher","award":["Colorado State Bill 18-086"],"award-info":[{"award-number":["Colorado State Bill 18-086"]}],"id":[{"id":"10.13039\/100000183","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Dependable and Secure Comput."],"published-print":{"date-parts":[[2023,7,1]]},"DOI":"10.1109\/tdsc.2022.3153325","type":"journal-article","created":{"date-parts":[[2022,3,1]],"date-time":"2022-03-01T20:37:42Z","timestamp":1646167062000},"page":"2781-2793","source":"Crossref","is-referenced-by-count":3,"title":["Does OpenBSD and Firefox\u2019s Security Improve With Time?"],"prefix":"10.1109","volume":"20","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1379-9443","authenticated-orcid":false,"given":"Jian","family":"Shi","sequence":"first","affiliation":[{"name":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8534-5048","authenticated-orcid":false,"given":"Deqing","family":"Zou","sequence":"additional","affiliation":[{"name":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8034-0942","authenticated-orcid":false,"given":"Shouhuai","family":"Xu","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Colorado Colorado Springs, Colorado, 80918, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5756-9765","authenticated-orcid":false,"given":"Xianjun","family":"Deng","sequence":"additional","affiliation":[{"name":"School of Cyber Science and Engineering, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3934-7605","authenticated-orcid":false,"given":"Hai","family":"Jin","sequence":"additional","affiliation":[{"name":"National Engineering Research Center for Big Data Technology and System, Services Computing Technology and System Lab, Cluster and Grid Computing Lab, Big Data Security Engineering Research Center, School of Computer Science and Technology, Huazhong University of Science and Technology, Wuhan, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3076142"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3051525"},{"key":"ref15","first-page":"10","article-title":"Milk or wine: Does software security improve with age","author":"ozment","year":"0","journal-title":"Proc 15th USENIX Conf Secur Symp"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3429444"},{"key":"ref53","article-title":"Advances in openbsd","author":"raadt","year":"2003"},{"key":"ref52","article-title":"Deterministic behaviours are your attacker","author":"raadt","year":"2019"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/JPROC.2020.2993293"},{"key":"ref55","article-title":"Fuzzing the openbsd kernel","author":"lindqvist","year":"2018"},{"key":"ref10","first-page":"1","article-title":"CD-VulD: Cross-domain vulnerability discovery based on deep domain adaptation","author":"liu","year":"2020","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"ref54","article-title":"Mitigations and other real security features","author":"raadt","year":"2017"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/QRS.2017.36"},{"key":"ref16","article-title":"Bugzilla main page","author":"mozilla","year":"2020"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3240729"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660320"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.25263\/asiabsdcon2019\/p01b"},{"key":"ref50","article-title":"Writing exploit-resistant code with openbsd","author":"teo","year":"0"},{"key":"ref46","article-title":"Mozilla foundation security advisories","year":"2019"},{"key":"ref45","article-title":"O. Security","year":"2019"},{"key":"ref48","article-title":"Exploit database - exploits for penetration testers, researchers, and ethical hackers","year":"2020"},{"key":"ref47","article-title":"Ubuntu security notices","year":"2020"},{"key":"ref42","article-title":"Common weakness enumeration","year":"2019"},{"key":"ref41","article-title":"Common vulnerability scoring system","year":"2019"},{"key":"ref44","article-title":"Securityfocus","year":"2020"},{"key":"ref43","article-title":"National vulnerability database","year":"2020"},{"key":"ref49","article-title":"Preventing privilege escalation","author":"provos","year":"0","journal-title":"Proc 12th USENIX Conf Secur Symp"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23158"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991102"},{"key":"ref9","first-page":"2224","article-title":"$\\mu$?vulDeepecker: A deep learning-based system for multiclass vulnerability detection","volume":"18","author":"zou","year":"2021","journal-title":"IEEE Trans Dependable Secure Comput"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/3276517"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/3238147.3238213"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2012.13"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2017.62"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2018.00040"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2012.6227141"},{"key":"ref34","first-page":"887","article-title":"Understanding and securing device vulnerabilities through automated bug report analysis","author":"feng","year":"0","journal-title":"Proc 28th USENIX Conf Secur Symp"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382284"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2019.2893950"},{"key":"ref31","first-page":"919","article-title":"Understanding the reproducibility of crowd-reported security vulnerabilities","author":"mu","year":"0","journal-title":"Proc 27th USENIX Conf Secur Symp"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24419"},{"key":"ref33","first-page":"905","article-title":"ATTACK2VEC: Leveraging temporal word embeddings to understand the evolution of cyberattacks","author":"shen","year":"0","journal-title":"Proc 28th USENIX Conf Secur Symp"},{"key":"ref32","first-page":"869","article-title":"Towards the detection of inconsistencies in public security vulnerability reports","author":"dong","year":"0","journal-title":"Proc 28th USENIX Conf Secur Symp"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3395363.3397356"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23326"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00057"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00017"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-013-9258-8"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/ICSE.2009.5070530"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/APSEC.2016.025"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134072"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-76440-3_3"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/ASE.2019.00095"},{"key":"ref21","first-page":"228","article-title":"A comparative study of maintainability index of open source software","volume":"2","author":"ganpati","year":"2012","journal-title":"Int J Emerg Technol Adv Eng"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2010.81"},{"key":"ref27","first-page":"964","article-title":"Empirical results on the study of software vulnerabilities","author":"wu","year":"0","journal-title":"Proc 3rd Int Conf Software Engineering"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/1181309.1181314"}],"container-title":["IEEE Transactions on Dependable and Secure Computing"],"original-title":[],"link":[{"URL":"https:\/\/ieeexplore.ieee.org\/ielam\/8858\/10177761\/9723619-aam.pdf","content-type":"application\/pdf","content-version":"am","intended-application":"syndication"},{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8858\/10177761\/09723619.pdf?arnumber=9723619","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,8,1]],"date-time":"2023-08-01T18:32:55Z","timestamp":1690914775000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9723619\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,1]]},"references-count":55,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1109\/tdsc.2022.3153325","relation":{},"ISSN":["1545-5971","1941-0018","2160-9209"],"issn-type":[{"value":"1545-5971","type":"print"},{"value":"1941-0018","type":"electronic"},{"value":"2160-9209","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,7,1]]}}}