patch-bridge/.zenodo.json at main · hyperpolymath/patch-bridge · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
{
  "title": "Patch Bridge: Closing the Detection-to-Remediation Gap in CVE Lifecycle Management",
  "description": "Existing vulnerability scanners stop at detection. Patch Bridge is currently a design-stage proposal for bridging disclosure to remediation through reachability analysis, planned Idris2 proof obligations, and mitigation selection. The current repository describes an intended architecture and research agenda; it does not yet provide a runnable standalone tool, mechanised proof corpus, or validated remediation metrics.",
  "upload_type": "publication",
  "publication_type": "preprint",
  "creators": [
    {
      "name": "Jewell, Jonathan D.A.",
      "orcid": "0000-0002-3078-6652",
      "affiliation": "The Open University"
    }
  ],
  "keywords": [
    "CVE",
    "vulnerability management",
    "reachability analysis",
    "formal verification",
    "software supply chain",
    "static analysis",
    "dependent types",
    "automated remediation"
  ],
  "subjects": [
    {
      "term": "Software Engineering",
      "identifier": "cs.SE",
      "scheme": "arxiv"
    },
    {
      "term": "Cryptography and Security",
      "identifier": "cs.CR",
      "scheme": "arxiv"
    }
  ],
  "license": {
    "id": "other-open"
  },
  "language": "eng",
  "access_right": "open",
  "related_identifiers": [
    {
      "identifier": "https://github.com/hyperpolymath/patch-bridge",
      "relation": "isSupplementTo",
      "scheme": "url"
    },
    {
      "identifier": "https://github.com/hyperpolymath/panic-attacker",
      "relation": "isPartOf",
      "scheme": "url"
    }
  ],
  "notes": "Patch Bridge originated as a module within panic-attacker and has been extracted into a standalone project. The current repository is still under audit and should be read as a design-stage artifact rather than a completed implementation."
}