{"id":"W2546280509","doi":"10.1109/metrisec.2011.12","title":"Security Risk Management by Qualitative Vulnerability Analysis","year":2011,"lang":"en","type":"article","venue":"","topic":"Software Engineering Techniques and Practices","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Vulnerability (computing); Risk analysis (engineering); Computer science; Risk management; Vulnerability assessment; Process (computing); Risk assessment; Selection (genetic algorithm); Qualitative analysis; Quantitative analysis (chemistry); Computer security; Qualitative research; Business; Artificial intelligence","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.009439682,0.001427064,0.0007898328,0.005045043,0.001216281,0.005753608,0.001987464,0.001104408,0.003465923],"category_scores_gemma":[0.02128622,0.0007292462,0.001573735,0.002401534,0.003085129,0.005018521,0.003253071,0.00148438,0.0004771101],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00412668,"about_ca_system_score_gemma":0.004444859,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.003625206,"about_ca_topic_score_gemma":0.003057052,"domain_scores_codex":[0.9919851,0.004229543,0.0003657439,0.0004841741,0.00263753,0.0002978338],"domain_scores_gemma":[0.9836755,0.01037379,0.001778433,0.001259164,0.002647668,0.0002653584],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"qualitative","study_design_scores_codex":[0.0001295619,0.0001640341,0.004882794,0.0006152022,0.0001455531,0.0003240024,0.002253669,0.3282055,0.004989974,0.513297,0.002780586,0.142212],"study_design_scores_gemma":[0.00003300005,0.00008813511,0.0009007622,0.0002762714,0.00005536069,0.0001386474,0.001434247,0.4839995,0.00404216,0.5002701,0.008671021,0.00009079148],"study_design_candidate":"qualitative","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.009667048,0.0001562449,0.9827772,0.0008526334,0.00001885227,0.0002396066,0.0001573093,0.0001669232,0.005964177],"genre_scores_gemma":[0.2764879,0.0004710651,0.7200938,0.0001224566,0.00002920416,0.0007489843,0.0002471222,0.0000573094,0.00174209],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.009439682,"threshold_uncertainty_score":0.04992241,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.02824263138750765,"score_gpt":0.3145270286382386,"score_spread":0.286284397250731,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}