17 citations · 30 across the 5 of their papers we have counts for
6 papers
Enhancing Vulnerability Prioritization: Data-Driven Exploit Predictions with Community-Driven Insights
Jay Jacobs, Sasha Romanosky, Octavian Suciu +2
The number of disclosed vulnerabilities has been steadily increasing over the years. At the same time, organizations face significant challenges patching their systems, leading to…
Exploit Prediction Scoring System (EPSS)
Jay Jacobs, Sasha Romanosky, Benjamin Edwards +2
Despite the massive investments in information security technologies and research over the past decades, the information security industry is still immature. In particular, the pri…
Risky Business: Assessing Security with External Measurements
Benjamin Edwards, Jay Jacobs, Stephanie Forrest
Security practices in large organizations are notoriously difficult to assess. The challenge only increases when organizations turn to third parties to provide technology and busin…
Modeling Internet-Scale Policies for Cleaning up Malware
Steven Hofmeyr, Tyler Moore, Stephanie Forrest +2
An emerging consensus among policy makers is that interventions undertaken by Internet Service Providers are the best way to counter the rising incidence of malware. However, asses…
Internet Topology over Time
Benjamin Edwards, Steven Hofmeyr, George Stelle +1
There are few studies that look closely at how the topology of the Internet evolves over time; most focus on snapshots taken at a particular point in time. In this paper, we invest…
Beyond the Blacklist: Modeling Malware Spread and the Effect of Interventions
Benjamin Edwards, Tyler Moore, George Stelle +2
Malware spread among websites and between websites and clients is an increasing problem. Search engines play an important role in directing users to websites and are a natural cont…