{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,11,4]],"date-time":"2026-11-04T20:17:43Z","timestamp":1793823463167,"version":"4.6.1"},"reference-count":78,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"3","license":[{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,3,1]],"date-time":"2023-03-01T00:00:00Z","timestamp":1677628800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"name":"European Union through the H2020 Programme","award":["830929"],"award-info":[{"award-number":["830929"]}]},{"name":"European Union through the H2020 Programme","award":["952647"],"award-info":[{"award-number":["952647"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IIEEE Trans. Software Eng."],"published-print":{"date-parts":[[2023,3,1]]},"DOI":"10.1109\/tse.2022.3176674","type":"journal-article","created":{"date-parts":[[2022,5,23]],"date-time":"2022-05-23T20:50:20Z","timestamp":1653339020000},"page":"1359-1373","source":"Crossref","is-referenced-by-count":21,"title":["Software Updates Strategies: A Quantitative Evaluation Against Advanced Persistent Threats"],"prefix":"10.1109","volume":"49","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-8713-8197","authenticated-orcid":false,"given":"Giorgio Di","family":"Tizio","sequence":"first","affiliation":[{"name":"University of Trento, Trento, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1735-1416","authenticated-orcid":false,"given":"Michele","family":"Armellini","sequence":"additional","affiliation":[{"name":"University of Trento, Trento, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1091-8486","authenticated-orcid":false,"given":"Fabio","family":"Massacci","sequence":"additional","affiliation":[{"name":"University of Trento, Trento, Italy"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23522"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1145\/3372297.3417232"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1145\/1835804.1835821"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2630069"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3134022"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1145\/3133956.3133960"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1093\/cybsec\/tyaa015"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3292500.3330742"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1111\/risa.13732"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.15439\/2017F488"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2017.08.005"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-59013-0_14"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-44885-4_5"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2016.05.018"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-662-61313-9"},{"key":"ref18","article-title":"A different cup of TI? The added value of commercial threat intelligence","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Bouwman"},{"key":"ref19","first-page":"851","article-title":"Reading the tea leaves: A comparative analysis of threat intelligence","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Li"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/CISS.2016.7460498"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1109\/ARES.2013.32"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1111\/j.1539-6924.2008.01030.x"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1111\/0272-4332.00057"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1111\/j.0021-9916.2007.00326.x"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-42051-2_15"},{"key":"ref26","article-title":"Advanced Persistent Threats (APTs) campaigns database","author":"Tizio","year":"2022"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2015.48"},{"key":"ref28","first-page":"903","article-title":"From patching delays to infection symptoms: Using risk profiles for an early discovery of vulnerabilities exploited in the wild","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Xiao"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2950290.2950325"},{"key":"ref30","article-title":"SANS vulnerability management survey 2019","year":"2019"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/CyberSecurity.2012.16"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-01766-2_147"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/SOSE.2014.53"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1109\/ICACCI.2015.7275911"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2014.09.006"},{"key":"ref36","doi-asserted-by":"publisher","DOI":"10.1109\/CYCON.2016.7529438"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/NTMS.2016.7792480"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1145\/2991079.2991122"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2018.06.055"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1109\/CDC.2018.8619416"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243829"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"ref43","first-page":"905","article-title":"ATTACK2VEC: Leveraging temporal word embeddings to understand the evolution of cyberattacks","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Shen"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00096"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2020.24046"},{"key":"ref46","first-page":"3005","article-title":"ATLAS: A sequence-based learning approach for attack investigation","volume-title":"Proc. USENIX Secur. Symp.","author":"Alsaheel"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM.2015.7218444"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2018.2858786"},{"key":"ref49","doi-asserted-by":"publisher","DOI":"10.1145\/2976749.2978315"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1109\/EuroSP51992.2021.00046"},{"key":"ref51","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00047"},{"key":"ref52","doi-asserted-by":"publisher","DOI":"10.1002\/sam.11296"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/CYCONUS.2017.8167501"},{"key":"ref54","first-page":"1041","article-title":"Vulnerability disclosure in the age of social media: Exploiting twitter for predicting real-world exploits","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Sabottke"},{"key":"ref55","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00053"},{"key":"ref56","first-page":"1009","article-title":"Cloudy with a chance of breach: Forecasting cyber security incidents","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Liu"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-54328-4_9"},{"key":"ref58","doi-asserted-by":"publisher","DOI":"10.1287\/isre.1080.0226"},{"key":"ref59","doi-asserted-by":"publisher","DOI":"10.1145\/2660267.2660320"},{"key":"ref60","article-title":"Milk or wine: Does software security improve with age?","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Ozment"},{"key":"ref61","doi-asserted-by":"publisher","DOI":"10.1109\/ACSAC.2008.42"},{"key":"ref62","doi-asserted-by":"publisher","DOI":"10.1111\/j.1539-6924.2010.01401.x"},{"key":"ref63","doi-asserted-by":"publisher","DOI":"10.1111\/risa.12864"},{"key":"ref64","article-title":"Measuring the changing cost of cybercrime","volume-title":"Proc. Annu. Workshop Econ. Inf. Secur.","author":"Anderson"},{"key":"ref65","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00019"},{"key":"ref67","article-title":"TESTREX: A testbed for repeatable exploits","volume-title":"Proc. Workshop Cyber Secur. Experimentation Test","author":"Dashevskyi"},{"key":"ref68","doi-asserted-by":"publisher","DOI":"10.1080\/00031305.1998.10480550"},{"key":"ref69","doi-asserted-by":"publisher","DOI":"10.1214\/ss\/1009213286"},{"key":"ref70","article-title":"Equation group: Questions and answers","year":"2015"},{"key":"ref71","article-title":"Operation blockbuster - unraveling the long thread of the sony attack","year":"2016"},{"key":"ref72","article-title":"0day \u201cin the wild\u201d","year":"2021"},{"key":"ref74","article-title":"Operating system market share \u2013 Bill Gates is still alone at the top!","author":"Stevanovic","year":"2020"},{"key":"ref75","article-title":"Think fast: Time between disclosure, patch release and vulnerability exploitation - Intelligence for vulnerability management, part two","year":"2020"},{"key":"ref76","doi-asserted-by":"publisher","DOI":"10.1145\/2382196.2382284"},{"key":"ref77","first-page":"426","article-title":"Some vulnerabilities are different than others - studying vulnerabilities and attack surfaces in the wild","volume-title":"Proc. Int. Workshop Recent Adv. Intrusion Detection","author":"Nayak"},{"key":"ref78","doi-asserted-by":"publisher","DOI":"10.1109\/TSE.2018.2816033"},{"key":"ref79","doi-asserted-by":"publisher","DOI":"10.1109\/MSEC.2021.3050433"},{"key":"ref80","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3125270"},{"key":"ref81","first-page":"869","article-title":"Towards the detection of inconsistencies in public security vulnerability reports","volume-title":"Proc. USENIX Conf. Secur. Symp.","author":"Dong"},{"key":"ref82","doi-asserted-by":"publisher","DOI":"10.1007\/s10664-015-9408-2"}],"container-title":["IEEE Transactions on Software Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/32\/10070338\/09780011.pdf?arnumber=9780011","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,1,22]],"date-time":"2024-01-22T23:11:01Z","timestamp":1705965061000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9780011\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,3,1]]},"references-count":78,"journal-issue":{"issue":"3"},"URL":"https:\/\/doi.org\/10.1109\/tse.2022.3176674","relation":{},"ISSN":["0098-5589","1939-3520","2326-3881"],"issn-type":[{"value":"0098-5589","type":"print"},{"value":"1939-3520","type":"electronic"},{"value":"2326-3881","type":"electronic"}],"subject":[],"published":{"date-parts":[[2023,3,1]]}}}