1.5k citations · 1.6k across the 13 of their papers we have counts for
13 papers
Measuring the Exploitation of Weaknesses in the Wild
Peter Mell, Irena Bojanova, Carlos Galhardo
Identifying the software weaknesses exploited by attacks supports efforts to reduce developer introduction of vulnerabilities and to guide security code review efforts. A weakness…
The Generation of Security Scoring Systems Leveraging Human Expert Opinion
Peter Mell
While the existence of many security elements can be measured (e.g., vulnerabilities, security controls, or privacy controls), it is challenging to measure their relative security…
Measurements of the Most Significant Software Security Weaknesses
Carlos Cardoso Galhardo, Peter Mell, Irena Bojanova +1
In this work, we provide a metric to calculate the most significant software security weaknesses as defined by an aggregate metric of the frequency, exploitability, and impact of r…
A Historical and Statistical Studyof the Software Vulnerability Landscape
Assane Gueye, Peter Mell
Understanding the landscape of software vulnerabilities is key for developing effective security solutions. Fortunately, the evaluation of vulnerability databases that use a framew…
A Suite of Metrics for Calculating the Most Significant Security Relevant Software Flaw Types
Peter Mell, Assane Gueye
The Common Weakness Enumeration (CWE) is a prominent list of software weakness types. This list is used by vulnerability databases to describe the underlying security flaws within…
Implementing a Protocol Native Managed Cryptocurrency
Peter Mell, Aurelien Delaitre, Frederic de Vaulx +1
Previous work presented a theoretical model based on the implicit Bitcoin specification for how an entity might issue a protocol native cryptocurrency that mimics features of fiat…
Augmenting Fiat Currency with an Integrated Managed Cryptocurrency
Peter Mell
In this work, we investigate how the governance features of a managed currency (e.g., a fiat currency) can be built into a cryptocurrency in order to leverage potential benefits fo…
A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems
Loic Lesavre, Priam Varin, Peter Mell +2
Identity management systems (IDMSs) are widely used to provision user identities while managing authentication, authorization, and data sharing within organizations and on the web.…
Blockchain Technology Overview
Dylan Yaga, Peter Mell, Nik Roby +1
Blockchains are tamper evident and tamper resistant digital ledgers implemented in a distributed fashion (i.e., without a central repository) and usually without a central authorit…
Quantifying Information Exposure in Internet Routing
Peter Mell, Assane Gueye, Christopher Schanzle
Data sent over the Internet can be monitored and manipulated by intermediate entities in the data path from the source to the destination. For unencrypted communications (and some…
Smart Contract Federated Identity Management without Third Party Authentication Services
Peter Mell, Jim Dray, James Shook
Federated identity management enables users to access multiple systems using a single login credential. However, to achieve this a complex privacy compromising authentication has t…
Managed Blockchain Based Cryptocurrencies with Consensus Enforced Rules and Transparency
Peter Mell
Blockchain based cryptocurrencies are usually unmanaged, distributed, consensus-based systems in which no single entity has control. Managed cryptocurrencies can be implemented usi…
Cryptocurrency Smart Contracts for Distributed Consensus of Public Randomness
Peter Mell, John Kelsey, James Shook
Most modern electronic devices can produce a random number. However, it is difficult to see how a group of mutually distrusting entities can have confidence in any such hardware-pr…