@inproceedings{5646,
  abstract     = {{While many theoretical arguments against or in favor of open source and closed source software development have been presented, the empirical basis for the assessment of arguments is still weak. Addressing this research gap, this paper presents a comprehensive empirical investigation of the patching behavior of software vendors/communities of widely deployed open source and closed source software packages, including operating systems, database systems, web browsers, email clients, and office systems. As the value of any empirical study relies on the quality of data available, this paper also discusses in detail data issues, explains to what extent the empirical analysis can be based on vulnerability data contained in the NIST National Vulnerability Database, and shows how data on vulnerability patches was collected by the author to support this study. The results of the analysis suggest that it is not the particular software development style that determines patching behavior, but rather the policy of the particular software vendor.}},
  author       = {{Schryen, Guido}},
  booktitle    = {{5th International Conference on IT Security Incident Management \& IT Forensics}},
  title        = {{{A comprehensive and comparative analysis of the patching behavior of open source and closed source software vendors}}},
  year         = {{2009}},
}

@inproceedings{5647,
  abstract     = {{Reviewing literature on open source and closed source security reveals that the discussion is often determined by biased attitudes toward one of these development styles. The discussion specifically lacks appropriate metrics, methodology and hard data. This paper contributes to solving this problem by analyzing and comparing published vulnerabilities of eight open source software and nine closed source software packages, all of which are widely deployed. Thereby, it provides an extensive empirical analysis of vulnerabilities in terms of mean time between vulnerability disclosures, the development of disclosure over time, and the severity of vulnerabilities, and allows for validating models provided in the literature. The investigation reveals that (a) the mean time between vulnerability disclosures was lower for open source software in half of the cases, while the other cases show no differences, (b) in contrast to literature assumption, 14 out of 17 software packages showed a significant linear or piecewise linear correlation between time and the number of published vulnerabilities, and (c) regarding the severity of vulnerabilities, no significant differences were found between open source and closed source.}},
  author       = {{Schryen, Guido}},
  booktitle    = {{15th Americas Conference on Information Systems}},
  keywords     = {{Vulnerabilities, security, open source software, closed source software, empirical comparison}},
  title        = {{{Security of open source and closed source software: An empirical comparison of published vulnerabilities}}},
  year         = {{2009}},
}

@inbook{17131,
  author       = {{Becker, Jörg and Matzner, Martin and Müller, Oliver}},
  booktitle    = {{Information Systems Development}},
  isbn         = {{9780387848099}},
  pages        = {{207--215}},
  publisher    = {{Springer}},
  title        = {{{Comparing Architectural Styles for Service-Oriented Architectures – a REST vs. SOAP Case Study}}},
  doi          = {{10.1007/b137171_22}},
  year         = {{2009}},
}

@inproceedings{17132,
  author       = {{Becker, Jörg and Bergener, Katrin and Müller, Oliver and Müller-Wienbergen, Felix}},
  booktitle    = {{Americas Conference on Information Systems}},
  pages        = {{93}},
  title        = {{{Documentation of flexible business processes-A healthcare case study}}},
  year         = {{2009}},
}

@inproceedings{17133,
  author       = {{Müller-Wienbergen, Felix and Seidel, Stefan and Müller, Oliver and Knackstedt, Ralf and Becker, Joerg}},
  booktitle    = {{European Conference on Information Systems}},
  title        = {{{A design research study on enhancing creativity-The case of developing product-service bundles}}},
  year         = {{2009}},
}

@article{13257,
  author       = {{Trier, Matthias and Bobrik, Annette}},
  issn         = {{1089-7801}},
  journal      = {{IEEE Internet Computing}},
  pages        = {{51--59}},
  title        = {{{Social Search: Exploring and Searching Social Architectures in Digital Networks}}},
  doi          = {{10.1109/mic.2009.44}},
  year         = {{2009}},
}

@inproceedings{13312,
  author       = {{Sanmateu, Maria-Amparo and Trier, Matthias and Lienicke, Andreas and Rederer, Andreas}},
  booktitle    = {{9th International Conference On Innovative Internet Community Systems I2CS 2010}},
  editor       = {{Erfurth, Christian AND Eichler, Gerald AND Schau, Volkmar}},
  pages        = {{ 27--35 }},
  publisher    = {{Gesellschaft für Informatik e.V.}},
  title        = {{{Enabling social media content quality assurance using social network analysis}}},
  year         = {{2009}},
}

@inproceedings{13349,
  author       = {{Bobrik, Annette and Trier, Matthias}},
  booktitle    = {{Proceedings Wirtschaftsinformatik}},
  pages        = {{295--304}},
  publisher    = {{Österreichische Computer Gesellschaft Verlag}},
  title        = {{{Content-based Community Detection in Social Corpora}}},
  volume       = {{1}},
  year         = {{2009}},
}

@inproceedings{13352,
  author       = {{Trier, Matthias and Herzog, Michael and Möller, Daniel}},
  booktitle    = {{Proceedings Wirtschaftsinformatik}},
  pages        = {{391--400}},
  publisher    = {{Österreichische Computer Gesellschaft Verlag}},
  title        = {{{Odp2cp – ein rapid E-Learning Ansatz zur einfachen Produktion Scorm-konformer Lerninhalte}}},
  year         = {{2009}},
}

@inproceedings{3477,
  author       = {{Becker, Jörg and Beverungen, Daniel and Knackstedt, Ralf}},
  booktitle    = {{Proceedings of the 41th Hawai'i International Conference on System Sciences}},
  location     = {{Waikoloa, Hawaii}},
  title        = {{{Reference Models and Modeling Languages for Product-Service Systems --- Status-Quo and Perspectives for Further Research}}},
  year         = {{2008}},
}

@inproceedings{3478,
  author       = {{Becker, Jörg and Beverungen, Daniel and Knackstedt, Ralf and Müller, Oliver}},
  booktitle    = {{Americas Conference on Information Systems}},
  location     = {{Toronto, Canada}},
  title        = {{{Modeling, Customer-Specific Configuration and Calculation of Value Bundles}}},
  year         = {{2008}},
}

@inproceedings{3479,
  author       = {{Beverungen, Daniel and Kaiser, Uwe and Knackstedt, Ralf and Krings, Robin and Stein, Armin}},
  booktitle    = {{Proceedings of the Multikonferenz Wirtschaftsinformatik (MKWI 2008)}},
  location     = {{München}},
  pages        = {{735----747}},
  title        = {{{Konfigurative Prozessmodellierung der hybriden Leistungserstellung in Unternehmensnetzwerken des Maschinen- und Anlagenbaus}}},
  year         = {{2008}},
}

@inproceedings{3480,
  author       = {{Winkelmann, Axel and Beverungen, Daniel and Janiesch, Christian and Becker, Jörg}},
  booktitle    = {{Proceedings of the 16th European Conference on Information Systems}},
  location     = {{Galway, Ireland}},
  title        = {{{Improving the Quality of Article Master Data --- Specification of an Integrated Master Data Platform for Promotions in Retail}}},
  year         = {{2008}},
}

@article{3507,
  author       = {{Beverungen, Daniel and Knackstedt, Ralf and Müller, Oliver}},
  journal      = {{Wirtschaftsinformatik}},
  number       = {{3}},
  pages        = {{220----234}},
  title        = {{{Entwicklung Serviceorientierter Architekturen zur Integration von Produktion und Dienstleistung --- Eine Konzeptionsmethode und ihre Anwendung am Beispiel des Recyclings elektronischer Geräte}}},
  year         = {{2008}},
}

@article{5832,
  author       = {{Sackmann, Stefan and Kundisch, Dennis and Ruch, M.}},
  journal      = {{HMD - Praxis der Wirtschaftsinformatik}},
  number       = {{1}},
  pages        = {{21--32}},
  title        = {{{CRM, Kundenbewertung und Risk-Return-Steuerung im betrieblichen Einsatz}}},
  volume       = {{45}},
  year         = {{2008}},
}

@inproceedings{5834,
  author       = {{Katzmarzik, Arne and Kundisch, Dennis and Zimmermann, Steffen}},
  booktitle    = {{Proceedings of the International Conference on Information Systems (ICIS)}},
  location     = {{Paris, France}},
  title        = {{{IT Sourcing Portfolio Management for IT Services Providers - A Risk/Cost Perspective}}},
  year         = {{2008}},
}

@article{5835,
  author       = {{Klein, Christian and Kundisch, Dennis}},
  journal      = {{Zeitschrift für Planung und Unternehmenssteuerung}},
  number       = {{3}},
  pages        = {{353--370}},
  title        = {{{Indexzertifikat oder ETF? Eine entscheidungstheoretische Analyse}}},
  volume       = {{19}},
  year         = {{2008}},
}

@article{5838,
  author       = {{Dzienziol, J. and Kundisch, Dennis}},
  journal      = {{Journal of Decision Systems}},
  number       = {{2}},
  pages        = {{175--209}},
  title        = {{{Decision Support for Financial Planning}}},
  volume       = {{17}},
  year         = {{2008}},
}

@article{5839,
  author       = {{Kundisch, Dennis and Loehner, F. and Rudolph, D. and Steudner, M. and Weiss, C. and Thomulka, M.}},
  journal      = {{Finanz Betrieb}},
  pages        = {{457--467}},
  title        = {{{Ökonomische Gesamtbanksteuerung mit Basel II-Daten - Eine exemplarische Untersuchung anhand von Kreditrisiken}}},
  volume       = {{7/8}},
  year         = {{2008}},
}

@inproceedings{5996,
  author       = {{Kundisch, Dennis and Sackmann, S. and Ruch, M.}},
  booktitle    = {{Proceedings of the 3rd International Workshop on Enterprise Applications and Services in the Finance Industry (FinanceCom)}},
  editor       = {{Veit, D. and Kundisch, Dennis and Weitzel, T. and Rabhi, Fethi and Rajola, F. and Weinhardt, C.}},
  location     = {{Montreal, Canada}},
  pages        = {{32--49}},
  publisher    = {{Springer}},
  title        = {{{Transferring Portfolio Selection Theory to Customer Portfolio Management - The Case of an e-Tailer}}},
  year         = {{2008}},
}