Catch Me If You Can: An In-Depth Study of CVE Discovery Time and Inconsistencies for Managing Risks in Critical Infrastructures.
Richard J. ThomasJoseph GardinerTom ChothiaEmmanouil SamanisJoshua PerrettAwais RashidPublished in: CPSIOTSEC@CCS (2020)