Once upon a Tuesday: Longitudinal analysis of the vulnerability management of Dutch municipalities

In recent years, more and more emphasis has been put on the importance of good preventative cyber security and vulnerability management techniques such as "Patch Tuesday". <br/>Despite the increased importance, not all organisations have the same resources and knowledge when it comes to securing their networks against cyber adversaries. <br/><br...

Vulnerability prealerting by monitoring the online repositories of open source projects

Software security plays a crucial role in the modern world governed by software. And while closed source projects can enjoy a sense of confidentiality when addressing security issues, open source projects undertake them publicly even though just as many projects rely on them. In 50% of documented cases, the vulnerabilities could have been...

Methodological Considerations in Exploit Prediction Systems

The growing number of software vulnerabilities being disclosed is posing a challenge to many organisations. With limited patching resources and only a fraction of the vulnerabilities posing a real threat, prioritization is key. Current prioritization methods, such as CVSS, are failing and are sometimes no better than random guessing. Exploit...

Enhancing Vulnerability Management for IoT Devices with Bug Bounty Programs and Responsible Disclosure

The Internet of Things (IoT) will soon impact the lives of thousands of people as numerous IoT devices are emerging in the consumer market. Consumers goods consist of products designed for the consumption of final consumers. Even though IoT applications are expected to improve people's lives, security is often lacking in current IoT devices....

Ethical hacking for boosting IoT vulnerability management: A first look into bug bounty programs and responsible disclosure

The security of the Internet of Things (IoT) has attracted much attention due to the growing number of IoT-oriented security incidents. IoT hardware and software security vulnerabilities are exploited affecting many companies and persons. Since the causes of vulnerabilities go beyond pure technical measures, there is a pressing demand...

Probabilistic coastal vulnerability assessment to storms at regional scale: Application to the coast at North-East Aegean Sea (Thrakiko Pelagos), Greece

In this study, a probabilistic vulnerability assessment to the impact of storms in the coast of Thrace, Greece was carried out. To this end, the methodology presented by Bosom and Jiménez (2011) has been applied with some modifications. The introduced modifications, for this work, were the use of a different run-up model to deal with the...