{"id":"W7132999523","doi":"","title":"Towards Identifying Vulnerabilities with Delayed Patching and Public Disclosure in Open-Source Communities","year":2024,"lang":"","type":"dissertation","venue":"TSpace","topic":"Information and Cyber Security","field":"Computer Science","cited_by":0,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of Toronto","funders":"","keywords":"Vulnerability (computing); Hacker; Secure coding; Set (abstract data type); Full disclosure; Vulnerability assessment; Qualitative analysis; Vulnerability management","routes":{"ca_aff":true,"ca_fund":false,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":["metaepi_narrow","scholarly_communication"],"consensus_categories":[],"category_scores_codex":[0.001576065,0.000696509,0.0007442762,0.0006617816,0.0009882251,0.00977866,0.002277593,0.0003442804,0.0001503834],"category_scores_gemma":[0.00006227697,0.0006248988,0.0001006617,0.001104431,0.0002433687,0.004248076,0.001645093,0.001885249,0.00004141816],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.0002147202,"about_ca_system_score_gemma":0.0008137809,"about_ca_topic_candidate":true,"about_ca_topic_consensus":true,"about_ca_topic_score_codex":0.03268031,"about_ca_topic_score_gemma":0.07467009,"domain_scores_codex":[0.9963672,0.0005699733,0.000862113,0.0006246472,0.0008253761,0.0007506949],"domain_scores_gemma":[0.9977675,0.0002309039,0.0004244866,0.0009973344,0.0003503711,0.0002293985],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"qualitative","study_design_gemma":"qualitative","study_design_scores_codex":[0.00009272568,0.00009643203,0.001173775,0.001278631,0.0001159726,0.00002220168,0.9104723,0.0001283123,0.000007090935,0.06589622,0.0001579223,0.0205584],"study_design_scores_gemma":[0.00110823,0.0002780728,0.004434514,0.002463615,0.00007217086,0.0000847868,0.9121358,0.06836826,0.0001122714,0.003630533,0.006071324,0.00124042],"study_design_candidate":"qualitative","study_design_consensus":"qualitative","genre_codex":"empirical","genre_gemma":"empirical","genre_scores_codex":[0.9521176,0.002487321,0.01699925,0.002484262,0.001006901,0.000992826,0.0000168159,0.0002097801,0.02368529],"genre_scores_gemma":[0.9905499,0.0003941872,0.001808901,0.0003257484,0.00005794978,0.0001452656,0.0003024379,0.00006094948,0.006354645],"genre_candidate":"empirical","genre_consensus":"empirical","teacher_disagreement_score":0.06823994,"threshold_uncertainty_score":0.9996203,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.0369662127416891,"score_gpt":0.327694231665051,"score_spread":0.2907280189233619,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}