S.-W. Woo, O. H. Alhazmi and Y. K. Malaiya, “Assessing Vulnerabilities in Apache and IIS HTTP Servers,” Proceedings of 2nd IEEE International Symposium on Dependable, Autonomic and Secure Computing, Indianapolis, 29 September-1 October 2006, pp. 103-110.

has been cited by the following article:

• TITLE: Quantitative Security Evaluation for Software System from Vulnerability Database

  AUTHORS: Hiroyuki Okamura, Masataka Tokuzane, Tadashi Dohi

  KEYWORDS: Quantitative Security Evaluation; Vulnerability Database; Non-Homogeneous Poisson Process, Contents Management System

  JOURNAL NAME: Journal of Software Engineering and Applications, Vol.6 No.4A, April 23, 2013

  ABSTRACT: This paper proposes a quantitative security evaluation for software system from the vulnerability data consisting of discovery date, solution date and exploit publish date based on a stochastic model. More precisely, our model considers a vulnerability life-cycle model and represents the vulnerability discovery process as a non-homogeneous Poisson process. In a numerical example, we show the quantitative measures for contents management system of an open source project.