arXiv:2611.15462 · v1
Chinese Whispers About Vulnerabilities
摘要
The dissemination of information about known software vulnerabilities occurs online in various ways. Everything from email and development systems to social media are used. Given this variety and a dataset of about 382 thousand online references for about 55 thousand vulnerabilities, the paper demonstrates that the referenced online information sources tend to be mostly dissimilar statistically. The mean cosine similarity between them is only 0.22. Interestingly, the amounts of online references neither increase nor decrease similarity between the online information sources. In contrast, vulnerabilities primarily associated with GitHub and programming language ecosystems tend to have more dissimilar online references than other vulnerabilities. Also vulnerability reports, whether in bug tracking systems or bug bounty platforms, tend to increase dissimilarity. With these empirical results, the paper contributes to the efforts to narrow an enduring knowledge gap related to the online tracking and associated traceability of software vulnerabilities.
作者备注：Proceedings of the Seventh International Conference on Intelligent Data Science Technologies and Applications (IDSTA 2026), Bucharest, IEEE, 2026, pp. 11-17