{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T04:28:31Z","timestamp":1780633711935,"version":"3.54.1"},"publisher-location":"New York, NY, USA","reference-count":34,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,10,30]],"date-time":"2017-10-30T00:00:00Z","timestamp":1509321600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"William and Flora Hewlett Foundation","award":["2016-3838"],"award-info":[{"award-number":["2016-3838"]}]},{"DOI":"10.13039\/100000001","name":"National Science Foundation","doi-asserted-by":"publisher","award":["CNS-1237264"],"award-info":[{"award-number":["CNS-1237264"]}],"id":[{"id":"10.13039\/100000001","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,10,30]]},"DOI":"10.1145\/3133956.3134047","type":"proceedings-article","created":{"date-parts":[[2017,10,27]],"date-time":"2017-10-27T12:48:18Z","timestamp":1509108498000},"page":"1501-1513","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":9,"title":["Quantifying the Pressure of Legal Risks on Third-party Vulnerability Research"],"prefix":"10.1145","author":[{"given":"Alexander","family":"Gamero-Garrido","sequence":"first","affiliation":[{"name":"University of California, San Diego, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Stefan","family":"Savage","sequence":"additional","affiliation":[{"name":"University of California, San Diego, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Kirill","family":"Levchenko","sequence":"additional","affiliation":[{"name":"University of California, San Diego, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Alex C.","family":"Snoeren","sequence":"additional","affiliation":[{"name":"University of California, San Diego, San Diego, CA, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2017,10,30]]},"reference":[{"key":"e_1_3_2_2_1_1","volume-title":"Available online at http:\/\/connect.data.com. Accessed","author":"Salesforce","year":"2017","unstructured":"Data.com connect - a Salesforce product. Available online at http:\/\/connect.data.com. Accessed April 2017."},{"key":"e_1_3_2_2_2_1","volume-title":"technology index - S&P Dow Jones indices. Available online at http:\/\/us.spindices.com\/indices\/equity\/dow-jones-us-technology-index. Accessed","author":"Dow Jones","year":"2017","unstructured":"Dow Jones U.S. technology index - S&P Dow Jones indices. Available online at http:\/\/us.spindices.com\/indices\/equity\/dow-jones-us-technology-index. Accessed April 2017."},{"key":"e_1_3_2_2_3_1","volume-title":"Available online at http:\/\/email-checker.net. Accessed","author":"Email","year":"2017","unstructured":"Email checker. Available online at http:\/\/email-checker.net. Accessed April 2017."},{"key":"e_1_3_2_2_4_1","volume-title":"Available online at https:\/\/hunter.io\/chrome. Accessed","author":"Email","year":"2017","unstructured":"Email hunter. Available online at https:\/\/hunter.io\/chrome. Accessed April 2017."},{"key":"e_1_3_2_2_5_1","volume-title":"Available online at https:\/\/hunter.io\/email-verifier. Accessed","author":"Email","year":"2017","unstructured":"Email verifier. Available online at https:\/\/hunter.io\/email-verifier. Accessed April 2017."},{"key":"e_1_3_2_2_6_1","volume-title":"Available online at http:\/\/fortune.com\/fortune500\/. Accessed","author":"Fortune","year":"2016","unstructured":"Fortune 500. Available online at http:\/\/fortune.com\/fortune500\/. Accessed June 2016."},{"key":"e_1_3_2_2_7_1","volume-title":"Available online at http:\/\/verify-email.org. Accessed","author":"Free","year":"2017","unstructured":"Free email verifier. Available online at http:\/\/verify-email.org. Accessed April 2017."},{"key":"e_1_3_2_2_8_1","volume-title":"technology ETF textbar IYW. Available online at https:\/\/www.ishares.com\/us\/products\/239522\/ishares-us-technology-etf. Accessed","author":"Shares","year":"2017","unstructured":"iShares U.S. technology ETF textbar IYW. Available online at https:\/\/www.ishares.com\/us\/products\/239522\/ishares-us-technology-etf. Accessed April 2017."},{"key":"e_1_3_2_2_9_1","volume-title":"Available online at https:\/\/kickbox.io. Accessed","year":"2017","unstructured":"kickbox. Available online at https:\/\/kickbox.io. Accessed April 2017."},{"key":"e_1_3_2_2_10_1","volume-title":"Available online at https:\/\/lead411.com. Accessed","year":"2017","unstructured":"lead411. Available online at https:\/\/lead411.com. Accessed April 2017."},{"key":"e_1_3_2_2_11_1","volume-title":"Available online at https:\/\/www.surveymonkey.com\/mp\/likert-scale\/. Accessed","author":"The Likert","year":"2015","unstructured":"The Likert scale explained. Available online at https:\/\/www.surveymonkey.com\/mp\/likert-scale\/. Accessed November 2015."},{"key":"e_1_3_2_2_12_1","volume-title":"Available online at http:\/\/mailtester.com. Accessed","author":"Mail","year":"2017","unstructured":"Mail tester. Available online at http:\/\/mailtester.com. Accessed April 2017."},{"key":"e_1_3_2_2_13_1","unstructured":"A qualified win for cybersecurity researchers in DMCA triennial rulemaking. Available at https:\/\/cdt.org\/blog\/a-qualified-win-for-cybersecurity-researchers-in-dmca-triennial-rulemaking\/. Accessed April 2017."},{"key":"e_1_3_2_2_14_1","volume-title":"Available online at http:\/\/www.zoominfo.com\/business\/reachout-info. Accessed","year":"2017","unstructured":"Reachout. Available online at http:\/\/www.zoominfo.com\/business\/reachout-info. Accessed April 2017."},{"key":"e_1_3_2_2_15_1","volume-title":"Available online at http:\/\/rocketreach.co. Accessed","year":"2017","unstructured":"Rocketreach. Available online at http:\/\/rocketreach.co. Accessed April 2017."},{"key":"e_1_3_2_2_16_1","volume-title":"Available online at http:\/\/seclists.org. Accessed","year":"2015","unstructured":"Seclists.org security mailing list archive. Available online at http:\/\/seclists.org. Accessed November 2015."},{"key":"e_1_3_2_2_17_1","volume-title":"Fifteen Years under the DMCA.","author":"Consequences Unintended","year":"2017","unstructured":"Unintended Consequences: Fifteen Years under the DMCA. Available at https:\/\/www.eff.org\/pages\/unintended-consequences-fifteen-years-under-dmca. Accessed April 2017."},{"key":"e_1_3_2_2_18_1","volume-title":"Available online at http:\/\/www.verifyemailaddress.org. Accessed","author":"Verify","year":"2017","unstructured":"Verify email address. Available online at http:\/\/www.verifyemailaddress.org. Accessed April 2017."},{"key":"e_1_3_2_2_19_1","volume-title":"Available online at http:\/\/www.ycombinator.com\/. Accessed","author":"Y","year":"2017","unstructured":"Y combinator. Available online at http:\/\/www.ycombinator.com\/. Accessed April 2017."},{"key":"e_1_3_2_2_20_1","volume-title":"Available online at http:\/\/www.zoominfo.com. Accessed","year":"2017","unstructured":"zoominfo. Available online at http:\/\/www.zoominfo.com. Accessed April 2017."},{"key":"e_1_3_2_2_21_1","doi-asserted-by":"publisher","DOI":"10.5555\/3154161"},{"key":"e_1_3_2_2_22_1","volume-title":"Privacy Law Scholars Conference","author":"Aleecia M.","year":"2013","unstructured":"Aleecia M. Aleecia M. McDonald and Wendy Seltzer. Quantifying the Internet's Erasers: Analysis through Chilling Effects Data. Privacy Law Scholars Conference, 2013."},{"key":"e_1_3_2_2_23_1","volume-title":"Libel law and the media: the chilling effect","year":"1997","unstructured":"Barendt, Lustgarten, Norrie, and Stephenson. Libel law and the media: the chilling effect. Clarendon Press, 1997."},{"key":"e_1_3_2_2_24_1","volume-title":"About us. Available online at https:\/\/www.blackrock.com\/corporate\/en-us\/about-us. Accessed","year":"2017","unstructured":"BlackRock. About us. Available online at https:\/\/www.blackrock.com\/corporate\/en-us\/about-us. Accessed April 2017."},{"key":"e_1_3_2_2_25_1","unstructured":"BSA. Long Comment Regarding a Proposed Exemption Under 17 U.S.C. 1201. 2014."},{"issue":"1","key":"e_1_3_2_2_26_1","first-page":"168","article-title":"Amending the ECPA to enable a Culture of Cybersecurity Research","volume":"22","author":"Burstein Aaron J.","year":"2008","unstructured":"Aaron J. Burstein. Amending the ECPA to enable a Culture of Cybersecurity Research. Harvard Journal of Law & Technology, 22(1):168--221, 2008.","journal-title":"Harvard Journal of Law & Technology"},{"key":"e_1_3_2_2_27_1","volume-title":"The current DMCA exemption process is a computer security vulnerability.","author":"Center for Democracy & Technology.","year":"2017","unstructured":"Center for Democracy & Technology. The current DMCA exemption process is a computer security vulnerability. Available at https:\/\/cdt.org\/blog\/the-current-dmca-exemption-process-is-a-computer-security-vulnerability\/. Accessed April 2017."},{"key":"e_1_3_2_2_28_1","first-page":"273","volume-title":"Proceedings of the 22nd USENIX Security Symposium","author":"Finifter Matthew","year":"2013","unstructured":"Matthew Finifter, Devdatta Akhawe, and David Wagner. An empirical study of vulnerability rewards programs. In Proceedings of the 22nd USENIX Security Symposium, pages 273--288, 2013."},{"key":"e_1_3_2_2_29_1","doi-asserted-by":"publisher","DOI":"10.1086\/467996"},{"key":"e_1_3_2_2_30_1","volume-title":"About us. Available online at https:\/\/press.linkedin.com\/about-linkedin. Accessed","year":"2017","unstructured":"LinkedIn. About us. Available online at https:\/\/press.linkedin.com\/about-linkedin. Accessed April 2017."},{"key":"e_1_3_2_2_31_1","volume-title":"New York Times","author":"Markoff John","year":"2001","unstructured":"John Markoff. Record panel threatens researcher. New York Times, April 2001."},{"key":"e_1_3_2_2_32_1","volume-title":"7th ACM SIGCOMM conference on Internet measurement","author":"Ohm Paul","year":"2007","unstructured":"Paul Ohm, Douglas Sicker, and Dirk Grunwald. Legal Issues Surrounding Monitoring During Network Research (Invited Paper). 7th ACM SIGCOMM conference on Internet measurement, 2007."},{"key":"e_1_3_2_2_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2005.17"},{"key":"e_1_3_2_2_34_1","volume-title":"Office Library of Congress. Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies, 2006","author":"Copyright U.S.","year":"2006","unstructured":"U.S. Copyright Office Library of Congress. Exemption to Prohibition on Circumvention of Copyright Protection Systems for Access Control Technologies, 2006. Available at https:\/\/www.copyright.gov\/fedreg\/2006\/71fr68472.html. Accessed April 2017."}],"event":{"name":"CCS '17: 2017 ACM SIGSAC Conference on Computer and Communications Security","location":"Dallas Texas USA","acronym":"CCS '17","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3133956.3134047","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3133956.3134047","content-type":"application\/pdf","content-version":"vor","intended-application":"syndication"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3133956.3134047","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T02:11:03Z","timestamp":1750212663000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3133956.3134047"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,10,30]]},"references-count":34,"alternative-id":["10.1145\/3133956.3134047","10.1145\/3133956"],"URL":"https:\/\/doi.org\/10.1145\/3133956.3134047","relation":{},"subject":[],"published":{"date-parts":[[2017,10,30]]},"assertion":[{"value":"2017-10-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}