• Blackhat
• Vulnerability Lifecycle

Large-Scale Vulnerability Analysis

September 2006

Authors

Stefan Frei, Martin May, Ulrich Fiedler, Bernhard Plattner

Excerpt

Analyzing over 80,000 security advisories, we determined the discovery-, disclosure-, exploit-, and patch-date of the vulnerabilities. We quantify the trend towards zero-day exploits and measure the gap between exploit- and patch-availability.

Download

• Large-Scale Vulnerability Analysis (pdf)

Outreach

• Proceedings of the 2006 SIGCOMM workshop on Large-scale attack defense by