With the rapidly evolving technological landscape, the huge development of the Internet of
Things, and the embracing of digital transformation, the world is witnessing an explosion in …

Software Vulnerabilities (SVs) are increasing in complexity and scale, posing great security
risks to many software systems. Given the limited resources in practice, SV assessment and …

Security vulnerabilities have been continually disclosed and documented. For the effective
understanding, management, and mitigation of the fast-growing number of vulnerabilities, an …

Tools that alert developers about library vulnerabilities depend on accurate, up-to-date
vulnerability databases which are maintained by security researchers. These databases …

An attack graph is a method used to enumerate the possible paths that an attacker can take
in the organizational network. MulVAL is a known open-source framework used to …

Selecting the optimal set of countermeasures to secure a network is a challenging task,
since it involves various considerations and trade-offs, such as prioritizing the risks to …

Although cyberattacks on machine learning (ML) production systems can be harmful, today,
security practitioners are ill-equipped, lacking methodologies and tactical tools that would …

Software vulnerabilities, once disclosed, can be documented in vulnerability databases,
which have great potential to advance vulnerability analysis and security research. People …

The thesis advances the field of software security by providing knowledge and automation
support for software vulnerability assessment using data-driven approaches. Software …

Cyber-security vulnerabilities are usually published in form of short natural language
descriptions (eg, in form of MITRE's CVE list) that over time are further manually enriched …