{"id":"W2030015318","doi":"10.1007/s00766-009-0090-z","title":"A vulnerability-centric requirements engineering framework: analyzing security attacks, countermeasures, and requirements based on vulnerabilities","year":2009,"lang":"en","type":"article","venue":"Requirements Engineering","topic":"Information and Cyber Security","field":"Computer Science","cited_by":101,"is_retracted":false,"has_abstract":false,"ca_institutions":"University of Toronto","funders":"","keywords":"Exploit; Vulnerability (computing); Computer security; Vulnerability management; Threat model; Computer science; Secure coding; Vulnerability assessment; Risk analysis (engineering); Security engineering; Security testing; Compromise; Software security assurance; Security information and event management; Security service; Information security; Cloud computing security; Business","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.01277462,0.00239456,0.001338786,0.005438666,0.001629913,0.005965052,0.003807616,0.002251898,0.001342095],"category_scores_gemma":[0.02323923,0.001710548,0.004046711,0.002488407,0.003751273,0.006720188,0.00293853,0.003559697,0.0006200242],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.003393691,"about_ca_system_score_gemma":0.009152076,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.007252553,"about_ca_topic_score_gemma":0.006625908,"domain_scores_codex":[0.9843495,0.005814384,0.001530536,0.001365172,0.006110863,0.0008294513],"domain_scores_gemma":[0.9818318,0.008584383,0.002053124,0.002806925,0.004176802,0.0005468634],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"theoretical_or_conceptual","study_design_scores_codex":[0.0001109423,0.0003830833,0.003092764,0.001181619,0.0004089715,0.001754962,0.00317242,0.2326077,0.01899211,0.6018293,0.005313966,0.131152],"study_design_scores_gemma":[0.00008787018,0.0002851688,0.001260555,0.0009490836,0.0003815699,0.001340739,0.001271244,0.6365391,0.01403405,0.3083508,0.0353199,0.0001799976],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":"theoretical_or_conceptual","genre_codex":"methods","genre_gemma":"methods","genre_scores_codex":[0.004240178,0.0001647557,0.9915947,0.0007546723,0.00002025365,0.0004074336,0.0001376555,0.0005576653,0.0021225],"genre_scores_gemma":[0.07980441,0.0003728381,0.9173315,0.000288974,0.00005432946,0.0005228097,0.0005142458,0.0001321975,0.0009786212],"genre_candidate":"methods","genre_consensus":"methods","teacher_disagreement_score":0.01277462,"threshold_uncertainty_score":0.06755942,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01926743977762655,"score_gpt":0.2668236870226438,"score_spread":0.2475562472450172,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}