Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Security impact ratings considered harmful   In this paper, we question the common practice of assigning security impact
ratings to OS updates. Specifically, we present evidence that ranking updates
by their perceived security importance, in order to defer applying some
updates, exposes systems to significant risk.
  We argue that OS vendors and security groups should not focus on security
updates to the detriment of other updates, but should instead seek update
technologies that make it feasible to distribute updates for all disclosed OS
bugs in a timely manner.

14
The categories of this paper are: math-ph
18
The categories of this paper are: econ
31
The categories of this paper are: ao-sci
21
The categories of this paper are: adap-org
22
The categories of this paper are: chao-dyn
37
The categories of this paper are: supr-con
12
The categories of this paper are: nucl-th
10
The categories of this paper are: q-bio
4
The categories of this paper are: cond-mat
36
The categories of this paper are: cmp-lg
34
The categories of this paper are: chem-ph
17
The categories of this paper are: q-fin
28
The categories of this paper are: alg-geom
3
The categories of this paper are: physics
35
The categories of this paper are: mtrl-th
33
The categories of this paper are: plasm-ph