But one crucial thing has been missing from the zero-day debate: data. Now, a new study from the RAND Corporation aims to change that by using details on over 200 zero-day vulnerabilities, and tries to shine light on questions such as how long zero-days remain undetected, or what percentage of them are discovered by more than one party.

Link zur Quelle