Are Vulnerability Disclosure Deadlines Justified? - Miles McQueen; Jason L. Wright; Lawrence Wellman (Metrisec@ESEM, 2011)

Analyses of Two End-User Software Vulnerability Exposure Metrics. - Jason L. Wright; Miles McQueen; Lawrence Wellman (ARES, 2012)

Analyses of two end-user software vulnerability exposure metrics (extended version). - Jason L. Wright; Miles McQueen; Lawrence Wellman (Inf. Secur. Tech. Rep., 2013)