Timelines for In-Code Discovery of Zero-Day Vulnerabilities and Supply-Chain Attacks

Andrew J. Lohn

Zero-day vulnerabilities can be accidentally or maliciously placed in code and can remain in place for years. In this study, we address an aspect of their longevity by considering…