Catch Me If You Can: An In-Depth Study of CVE Discovery Time and Inconsistencies for Managing Risks in Critical Infrastructures. - Richard James Thomas; Joseph Gardiner; Tom Chothia; Emmanouil Samanis; Joshua Perrett; Awais Rashid (CPSIOTSEC@CCS, 2020)