{"id":"W4410020352","doi":"10.1080/19393555.2025.2498466","title":"Vulnerability scoring metric of CVSS needs to be adjusted per each product: our analysis on Linux and Apache","year":2025,"lang":"en","type":"article","venue":"Information Security Journal A Global Perspective","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":4,"is_retracted":false,"has_abstract":true,"ca_institutions":"Polytechnique Montréal","funders":"","keywords":"Computer science; Metric (unit); Vulnerability (computing); Product metric; Product (mathematics); Operating system; Computer security; Metric space; Operations management; Mathematics; Discrete mathematics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"metacan-v3-hybrid-931329e0061c","candidate_categories":["metaresearch"],"consensus_categories":[],"category_scores_codex":[0.003828199,0.0007986212,0.000491614,0.003304223,0.0005871461,0.001849921,0.0006599419,0.0005201763,0.001315721],"category_scores_gemma":[0.02881151,0.0002005795,0.0008590909,0.003459807,0.000988361,0.003358691,0.001253663,0.001117263,0.0004625588],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0009985175,"about_ca_system_score_gemma":0.001123826,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.008943523,"about_ca_topic_score_gemma":0.005818848,"domain_scores_codex":[0.9966621,0.0008386367,0.0002520678,0.0004859207,0.001464903,0.000296291],"domain_scores_gemma":[0.9657791,0.01720054,0.005072343,0.003231681,0.00792447,0.0007918725],"domain_codex":null,"domain_gemma":"evaluation","domain_candidate":"evaluation","domain_consensus":null,"study_design_codex":"observational","study_design_gemma":"observational","study_design_scores_codex":[0.0002976455,0.0002331154,0.8011725,0.000572453,0.0002394371,0.001178971,0.004064043,0.02103808,0.006957252,0.005683591,0.006377728,0.1521852],"study_design_scores_gemma":[0.000008795684,0.0003733346,0.9147641,0.000175145,0.0001487751,0.0009467771,0.005600771,0.05851588,0.004782368,0.004507908,0.01009243,0.00008387255],"study_design_candidate":"observational","study_design_consensus":"observational","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9836814,0.0004011534,0.01028341,0.0003120045,0.0000213244,0.00007094331,0.0007954516,0.0003270964,0.004107194],"genre_scores_gemma":[0.9912806,0.0001283968,0.0060757,0.00003509402,0.00001017295,0.00005430179,0.001480809,0.00007802554,0.0008570219],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.9961718,"threshold_uncertainty_score":0.02024567,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01565176391628625,"score_gpt":0.320832740886857,"score_spread":0.3051809769705707,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}