Transfer Report (PDF)¶

PhD Transfer Report Document¶

Title: Analyzing CVE Lifecycle and Relationships with Exploits, Patches, CWEs, and CPEs: A Focus on Microsoft Vulnerabilities

Author: Eid ALBADDAH
Institution: City St George's, University of London
Department: Computer Science
Date: 2025

Document Access¶

Document Structure¶

The transfer report contains the following key sections:

Chapter 1: Introduction¶

• Research motivation and objectives
• Problem statement and significance
• Research questions and hypotheses

Chapter 2: Literature Review¶

• Security econometrics foundations
• Vulnerability lifecycle research
• Existing methodologies and limitations

Chapter 3: Methodology¶

• Data collection framework
• Statistical analysis approach
• Validation procedures

Chapter 4: CVE Analysis¶

• Annual CVE distribution patterns
• Severity analysis across CVSS versions
• Product and vendor vulnerability analysis
• CWE pattern analysis and relationships

Chapter 5: Lifecycle Analysis¶

• Vulnerability lifecycle event modeling
• Exploit-patch race dynamics
• Time-to-patch analysis by severity
• Temporal pattern identification

Chapter 6: Future Work¶

• Multi-vendor expansion plans
• Advanced modeling approaches
• Predictive framework development
• Research timeline and milestones

Major Contributions¶

1. Comprehensive Dataset: Assembly of one of the largest vulnerability lifecycle datasets for academic research
2. Methodological Framework: Development of systematic approach to vulnerability lifecycle analysis
3. Empirical Insights: Initial findings on Microsoft vulnerability patterns and exploit timing
4. Research Foundation: Establishment of robust foundation for expanded multi-vendor analysis

Citation Information¶

@phdthesis{albaddah2024vulnerability,
  title={Analyzing CVE Lifecycle and Relationships with Exploits, Patches, CWEs, and CPEs: A Focus on Microsoft Vulnerabilities},
  author={Albaddah, Eid},
  year={2025},
  school={City St George's, University of London},
  type={PhD Transfer Report},
  department={Computer Science}
}

This transfer report established the foundation for the comprehensive multi-vendor vulnerability lifecycle analysis and represents a significant milestone in the PhD research journey.