@inproceedings{5df860e7d3bf41aebb82b1441e8e1870,
title = "Determining vulnerability resolution time by examining malware proliferation rates",
abstract = "One of the ways that malware infects is by exploiting weaknesses in computer systems, often through conditions in software. When this happens, software and operating system vendors must repair these vulnerabilities by patching their software. However, vendors can release patches but cannot force users to apply them. Malware attempts to proliferate without regard to the state of the infected system; it is only once that the malware infection is stopped that we can truly say that systems are patched to eliminate that exploit. By examining appearance and disappearance of malware types, as determined through dynamic analysis of malware samples, classified by behavioral profiles correlated with a timeline of discovery dates, we can determine a more real-world average time for effective patch times, as opposed to the time it takes for a vendor to release a patch for a discovered vulnerability.",
keywords = "Malware, Malware emergence, Malware trends, Patch time, Vulnerability resolution",
author = "Seideman, {Jeremy D.} and Bilal Khan and {Ben Brahim}, Ghassen",
year = "2013",
doi = "10.1109/IWCMC.2013.6583808",
language = "English (US)",
isbn = "9781467324793",
series = "2013 9th International Wireless Communications and Mobile Computing Conference, IWCMC 2013",
pages = "1678--1682",
booktitle = "2013 9th International Wireless Communications and Mobile Computing Conference, IWCMC 2013",
note = "2013 9th International Wireless Communications and Mobile Computing Conference, IWCMC 2013 ; Conference date: 01-07-2013 Through 05-07-2013",
}