@ {5087,
	title = { Challenges and Reality of the IT-space: Software  Engineering  and  Cybersecurity.  International  Conference  SECS-2022,  October  25-26th, 2022, Proceedings Book},
	year = {2023},
	pages = {3-15},
	publisher = { Institute of Bioorganic Chemistry, Polish  Academy of Sciences, Scientific Publishers OWN},
	chapter = {Long Tail of Security  Vulnerabilities  and  Nation  State  APT  Actors.},
	abstract = {Recently numerous Advanced Persistent Threat groups originating from various countries have been identified, carrying out a wide range of attacks from spear phishing to exploits focused on various entities both commercial and governmental and even military. Many of them exploit zero-day unknown vul-nerabilities for which no patch is available, however there are also many cases in which the patch is publicly known and perfectly accessible to the software administrator, but still it is not applied to vulnerable software. This phenomenon is analyzed in the presented work. The list of most commonly exploited vul-nerabilities has been cross-referenced with commonly available reports of APT actors{\textquoteright} activity, and checked against the raw data from a massively used vul-nerability management solution. The authors postulate that APT groups suc-cessfully exploit the {\textquotedblleft}long tail{\textquotedblright} of security vulnerabilities that remain unpatched for months and even years, despite the availability of a fix.},
	keywords = {advanced persistent threat, Cybersecurity, security  patch, software  vulnerabilities, unpatched  vulnerability, vulnerability long tail},
	isbn = {978-83-7712-049-1},
	attachments = {https://www.kti.ue.poznan.pl/sites/default/files/SECS_2022_Long_tail_manuscript.pdf},
	author = {Wilusz, Daniel and Sadowczyk, Dominik and A. W{\'o}jtowicz and Tasiemski, Leszek},
	editor = {A. W{\'o}jtowicz and Wilusz, Daniel and Kryvoruchko, Olena and Tokar, Volodymyr}
}
