activity
20192023
most citedAn Analysis of How Many Undiscovered Vulnerabilities Remain in Information Systems

18 citations · 45 across the 5 of their papers we have counts for

collaborators

5 papers

cs.CR2023★ 11 cited

Adversarial Machine Learning and Cybersecurity: Risks, Challenges, and Legal Implications

Micah Musser, Andrew Lohn, James X. Dempsey +14

In July 2022, the Center for Security and Emerging Technology (CSET) at Georgetown University and the Program on Geopolitics, Technology, and Governance at the Stanford Cyber Polic…

cs.CR2023★ 18 cited

An Analysis of How Many Undiscovered Vulnerabilities Remain in Information Systems

Jonathan M Spring

Vulnerability management strategy, from both organizational and public policy perspectives, hinges on an understanding of the supply of undiscovered vulnerabilities. If the number…

cs.CR2021★ 15 cited

On managing vulnerabilities in AI/ML systems

Jonathan M. Spring, April Galyardt, Allen D. Householder +1

This paper explores how the current paradigm of vulnerability management might adapt to include machine learning systems through a thought experiment: what if flaws in machine lear…

cs.CR2020

Learning the Associations of MITRE ATT&CK Adversarial Techniques

Rawan Al-Shaer, Jonathan M. Spring, Eliana Christou

The MITRE ATT&CK Framework provides a rich and actionable repository of adversarial tactics, techniques, and procedures (TTP). However, this information would be highly useful for…

cs.CY2019★ 1 cited

Review of human decision-making during computer security incident analysis

Jonathan M. Spring, Phyllis Illari

We review practical advice on decision-making during computer security incident response. Scope includes standards from the IETF, ISO, FIRST, and the US intelligence community. To…