Qubes OS Security in the Public Record

The paper presents a protocol-driven longitudinal analysis of Qubes OS Security Bulletins to measure the public advisory record rather than latent vulnerability incidence or realized compromise.