公共记录中的Qubes操作系统安全性
Qubes OS Security in the Public Record
浏览论文内容
中文总结 AI 辅助
研究针对Qubes操作系统，对其109份安全公告等进行协议驱动纵向分析，运用多种方法，揭示公共记录中存在上游依赖性，虽披露活动趋稳但负担仍集中在上游，为Qubes OS安全研究提供多方面数据与结论。
中文摘要 AI 辅助
Qubes操作系统是安全度量的一个典型案例，因为其架构使组件边界与安全相关。我们对109份公开的Qubes安全公告（2011 - 2025年）、官方维护的Xen安全咨询（XSA）追踪器以及一个次要的漏洞事件敏感性序列进行了协议驱动的纵向分析。该研究衡量的是公共咨询记录而非潜在漏洞发生率或实际的安全漏洞。方法结合了经审核的确定性组件归因、变点分析、过度离散检查、严重性代理加权、审查敏感性、文献延迟下限以及漏洞发现模型的基线感知评估。结果显示在该公共记录中存在持续的上游依赖性。在官方追踪器上，464个XSA中有113个影响Qubes；在主要标签下，109个QSB中有87个（79.8%）可归因于Xen、CPU/微架构或其他上游组件而非Qubes核心逻辑，加权视图下结果类似。变点分析确定2015年第一季度是季度咨询序列中的主要断点，而2018年后的年度披露率在统计上较为平稳。泊松推断在离散诊断和负二项式敏感性检查下是稳定的。归因码本在分层的30个QSB审核中表现良好，S形的漏洞发现模型描述性地拟合但在短期预测中并未显著优于滚动均值基线。总体而言，Qubes公共咨询记录看似稳定，但并非平静：披露活动在比早期更高的水平上趋于平稳，而观察到的负担仍集中在上游信任锚点。
英文摘要
Qubes OS is a revealing case for security measurement because its architecture makes component boundaries security-relevant. We present a protocol-driven longitudinal analysis of 109 public Qubes Security Bulletins (QSBs, 2011--2025), the official Qubes-maintained Xen Security Advisory (XSA) tracker, and a secondary vulnerability-event sensitivity series. The study measures the public advisory record rather than latent vulnerability incidence or realized compromise. The methodology combines audited deterministic component attribution, change-point analysis, overdispersion checks, severity-proxy weighting, censoring sensitivity, documentary latency lower bounds, and baseline-aware evaluation of vulnerability discovery models (VDMs). The results show persistent upstream dependence in that public record. On the official tracker, 113 of 464 XSAs affect Qubes; under primary labeling, 87 of 109 QSBs (79.8\%) are attributable to Xen, CPU/microarchitectural, or other upstream components rather than Qubes-core logic, with similar results under weighted views. Change-point analyses identify 2015Q1 as the dominant break in the quarterly advisory series, while post-2018 annual disclosure rates are statistically flat. Poisson inferences are stable under dispersion diagnostics and negative-binomial sensitivity checks. The attribution codebook performs well in a stratified 30-QSB audit, and S-shaped VDMs fit descriptively but do not significantly outperform a rolling-mean baseline in short-horizon forecasts. Overall, the Qubes public advisory record appears stable, but not quiet: disclosure activity plateaus at a higher level than in the earliest years, while the observed burden remains concentrated in upstream trust anchors.
发表机构
- institutetext: Pwnshow（Pwnshow）
机构由 AI 辅助整理，请以论文原文为准。
