journal article·2025Open access

Multi-Phase Modeling for Vulnerability Detection & Patch Management: An Analysis Using Numerical Methods

Adarsh Anand, Deepti Aggrawal, Omar H. Alhazmi

Computers, Materials & Continua· Volume 84· Issue 1

Abstract

Software systems are vulnerable to security breaches as they expand in complexity and functionality. The confidentiality, integrity, and availability of data are gravely threatened by flaws in a system’s design, implementation, or configuration. To guarantee the durability & robustness of the software, vulnerability identification and fixation have become crucial areas of focus for developers, cybersecurity experts and industries. This paper presents a thorough multi-phase mathematical model for efficient patch management and vulnerability detection. To uniquely model these processes, the model incorporated the notion of the learning phenomenon in describing vulnerability fixation using a logistic learning function. Furthermore, the authors have used numerical methods to approximate the solution of the proposed framework where an analytical solution is difficult to attain. The suggested systematic architecture has been demonstrated through statistical analysis using patch datasets, which offers a solid basis for the research conclusions. According to computational research, learning dynamics improves security response and results in more effective vulnerability management. The suggested model offers a systematic approach to proactive vulnerability mitigation and has important uses in risk assessment, software maintenance, and cybersecurity. This study helps create more robust software systems by increasing patch management effectiveness, which benefits developers, cybersecurity experts, and sectors looking to reduce security threats in a growing digital world.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Simulation Techniques and Applications

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (37)

Show source-provided references
1. Software security10.1109/MSECP.2004.1281254 ↗
2. How effective are neural networks for fixing security vulnerabilities
3. Software vulnerability mining and analysis based on deep learning
4. Anand · System reliability management · 2018 · 19
5. Engineering security vulnerability prevention, detection, and response10.1109/MS.2018.290110854 ↗
6. Is finding security holes a good idea?10.1109/MSP.2005.17 ↗
7. Modeling the vulnerability discovery process
8. Improving vulnerability discovery models
9. An empirical methodology to evaluate vulnerability discovery models10.1109/TSE.2014.2354037 ↗
10. Data preparation for software vulnerability prediction: a systematic literature review10.1109/TSE.2022.3171202 ↗
11. Vulnerability prediction capability: a comparison between vulnerability discovery models and neural network models10.1016/j.cose.2019.101596 ↗
12. Software vulnerability discovery techniques: a survey
13. The attack of the clones: a study of the impact of shared code on vulnerability patching
14. Vulnerability discovery in multi-version software systems
15. Vulnerability discovery modeling for open and closed source software10.4018/IJSSE.2016100102 ↗
16. Modeling and characterizing software vulnerabilities
17. A case study on software vulnerability coordination10.1016/j.infsof.2018.06.005 ↗
18. A large-scale empirical study of security patches
19. Challenges on prioritizing software patching
20. Modeling vulnerability discovery and patching with fixing lag
21. Almukaynizi · AI in cybersecurity · 2018 · 81
22. Anand · Advances in system reliability engineering · 2019 · 26710.1016/B978-0-12-815906-4.00011-7 ↗
23. Patching as translation: the data and the metaphor
24. Vulnerability patch modeling10.1142/S0218539316400131 ↗
25. PatchDiscovery: patch presence test for identifying binary vulnerabilities based on key basic blocks10.1109/TSE.2023.3332732 ↗
26. Shrivastava · Reliability engineering · 2019 · 40110.1201/9780429488009-15 ↗
27. Software security patch management systematic literature review of challenges, approaches, tools and practices10.1016/j.infsof.2021.106771 ↗
28. A machine learning approach to classify security patches into vulnerability types
29. Assessing the impact of software patching on vulnerabilities: a comprehensive framework for faulty and safe patches10.1142/S0218539324500311 ↗
30. Tracking patches for open source software vulnerabilities
31. Selecting best software vulnerability scanner using intuitionistic fuzzy set TOPSIS
32. Dahlquist · Numerical methods · 2012 · 592
33. Dennis · Numerical methods for unconstrained optimization and nonlinear equations · 1996 · 375
34. Rice · Numerical methods in software and analysis · 2014 · 720
35. Butcher · Numerical methods for ordinary differential equations · 2016 · 544
36. A history of Runge-Kutta methods10.1016/0168-9274(95)00108-5 ↗
37. Optimal software release policies for models incorporating learning in testing