Replication Package for Causal Analysis

The intent of this document is to provide instructions for the replication of the study described in “A Socio-technical Perspective on Software Vulnerabilities: A Causal Analysis” hereafter called the “Original Study.”

---

Table of contents

• Foreword
• Starting Point
• Handling Missing Data
• Next Time Period Variables
• Removing Short CVE Timelines
• Determinism and High Intercorrelation Variables
• Binarize CVE IDs
• Null Features Prior to Bootstrapped Search
• Knowledge Box for Search (Causal Discovery)
• Causal Discovery to Null Variable Dataset
• Conclusion
• Appendix