Estimating U.S. arsenal of zero-day vulnerabilities (2016)(jia.sipa.columbia.edu)

https://jia.sipa.columbia.edu/online-articles/healey_vulnerability_equities_process