Disclosing vulnerabilities to protect users

Re:Disclosing vulnerabilities to protect users by fulafel on Tuesday November 01, 2016 @03:47AM (#12844043)

I don't think it says that about the set of all vulnerabilities (IOW - citation needed!).

It does say "In this paper, we consider only exploits that have been used in real-world attacks before the corresponding vulnerabilities were disclosed" so it's unsurprising that in their dataset this is the case :)

[ Parent | on HN ]

Re:Disclosing vulnerabilities to protect users by XparXnoiAx on Tuesday November 01, 2016 @01:16PM (#12847955)

Yeap, you're right, I misread. Here is a quote from the paper: "15% of these exploits were created before the disclosure of the corresponding vulnerability." So there's a lower bound.

[ Parent | on HN ]