Publications

Support for the Vulnerability Management Process Using Conversion CVSS Base Score 2.0 to 3.x
Shows how converting CVSS scores across versions can support vulnerability management workflows, continuity, and better decision‑making.
Cite DOI URL
Comparative Analysis of Open-Source Tools for Conducting Static Code Analysis
Comparative study of open‑source static analysis (SAST) tools, assessing detection coverage, performance, and practicality to guide tool selection.
Cite DOI URL
Automated Calculation of CVSS v3.1 Temporal Score Based on Apache Log4j 2021 Vulnerabilities
Automates CVSS v3.1 temporal scoring using signals from the Log4j 2021 case, improving timely, context-aware risk assessment and remediation decisions.
Cite DOI
Analysis of CVSS Vulnerability Base Scores in the Context of Exploits’ Availability
Examines CVSS base scores versus exploit availability to see if severity aligns with real-world exploitability and to inform risk-based prioritization.
Cite DOI
Base Systems for Docker Containers - Security Analysis
Security evaluation of base container images, highlighting common risks and best practices for selecting hardened Docker foundations.
Cite DOI
Vulnerability Management Models Using a Common Vulnerability Scoring System
Survey of vulnerability management models leveraging CVSS for scoring and prioritization, guiding effective program design and risk reduction.
Cite DOI URL
Machine Learning Algorithms for Conversion of CVSS Base Score from 2.0 to 3.x
ML models to convert CVSS 2.0 base scores to CVSS 3.x, enabling consistent, automated migration and better vulnerability prioritization across systems.
Cite
Conversion of CVSS Base Score from 2.0 to 3.1
Techniques to convert CVSS v2.0 base scores to v3.1, bridging versions for consistent vulnerability management during program transitions.
Cite DOI
Automatic CVSS-based Vulnerability Prioritization and Response with Context Information
Automated, context‑aware vulnerability prioritization and response using CVSS, integrating environmental factors to streamline remediation workflows.
Cite DOI
Efficient Algorithm for Providing Live Vulnerability Assessment in Corporate Network Environment
Near‑real‑time enterprise vulnerability assessment that integrates inventory data and CVSS to prioritize remediation across corporate networks.
Cite DOI URL
Distributed Analysis Tool for Vulnerability Prioritization in Corporate Networks
Distributed system for enterprise vulnerability collection and prioritization, reducing latency and supporting large corporate networks at scale.
Cite DOI
Container Based Analysis Tool for Vulnerability Prioritization in Cyber Security Systems
Containerized analysis tool that aggregates vulnerability data and prioritizes remediation across assets using CVSS, enabling scalable security operations.
Cite DOI
The impact of cyber security on the quality of service in optical networks
Evaluates how cybersecurity mechanisms influence QoS in optical networks, balancing protection with performance and service reliability.
PDF Cite