Patch management is a crucial component of information security management. An important problem within this context from a vendor's perspective is to determine how to release patches to fix vulnerabilities in its software. From a firm's perspective, the issue is how to update vulnerable systems...

This note extends some of the key results of Dong and Rudi (2004) to general demand distributions. This generalization is achieved in two steps. First, we build on the analysis of Dong and Rudi to demonstrate that an inventory problem with transshipment is equivalent to a newsvendor problem with...

We consider stock positioning in a pure assembly system controlled using installation base-stock policies. When component suppliers have random capacity and end-product demand is uncertain, we characterize the system's inventory dynamics. We show that components and the end product play convex...