{"id":"W4410020352","doi":"10.1080/19393555.2025.2498466","title":"Vulnerability scoring metric of CVSS needs to be adjusted per each product: our analysis on Linux and Apache","year":2025,"lang":"en","type":"article","venue":"Information Security Journal A Global Perspective","topic":"Advanced Malware Detection Techniques","field":"Computer Science","cited_by":4,"is_retracted":false,"has_abstract":true,"ca_institutions":"Polytechnique Montréal","funders":"","keywords":"Computer science; Metric (unit); Vulnerability (computing); Product metric; Product (mathematics); Operating system; Computer security; Metric space; Operations management; Mathematics; Discrete mathematics","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0009550878,0.0001991117,0.0003708079,0.001889904,0.0002474365,0.0002729225,0.0004951406,0.00008116923,0.000004308941],"category_scores_gemma":[0.0009628369,0.0001830364,0.0001729662,0.007122301,0.00003952528,0.002412307,0.0002642336,0.000466743,0.00000469974],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00122905,"about_ca_system_score_gemma":0.0001467086,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.0002766052,"about_ca_topic_score_gemma":0.00005019757,"domain_scores_codex":[0.9981952,0.0001408565,0.0006045126,0.0002571954,0.0005541166,0.0002481485],"domain_scores_gemma":[0.9971775,0.00006318094,0.0003811335,0.0004296906,0.00178684,0.0001616907],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"observational","study_design_scores_codex":[0.0008011376,0.0007748875,0.0129016,0.0002405352,0.002286764,0.00001066297,0.1006204,0.02393245,0.0002917316,0.7230537,0.002986829,0.1320993],"study_design_scores_gemma":[0.005815086,0.004236469,0.3745808,0.0005865798,0.001640591,0.0007518972,0.1835747,0.07105393,0.08013395,0.258356,0.01596152,0.003308448],"study_design_candidate":"theoretical_or_conceptual","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1376623,0.0001591075,0.8477094,0.007387076,0.0002818893,0.0004782159,0.00003509084,0.0002134742,0.006073501],"genre_scores_gemma":[0.9857752,0.00002426707,0.0134641,0.0006680018,0.00003825829,0.00001432821,0.000001312841,0.000002337947,0.00001214989],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.8481129,"threshold_uncertainty_score":0.7464008,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.01565176391628625,"score_gpt":0.320832740886857,"score_spread":0.3051809769705707,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}