Arora, Ashish; Telang, Rahul; Xu, Hao - In: Management Science 54 (2008) 4, pp. 642-656
Software vulnerabilities represent a serious threat to cybersecurity, most cyberattacks exploit known vulnerabilities. Unfortunately, there is no agreed-upon policy for their disclosure. Disclosure policy (which sets a protected period given to a vendor to release the patch for the...