# Automated Reasoning for Vulnerability Management by Design

arXiv: https://arxiv.org/abs/2507.05794 · HTML: https://mlsanity.com/paper/2507.05794/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Builds on 1 of its 24 references that are in the map.
- First posted on arXiv 8 Jul 2025.

## Builds on (most cited first, 1 of 1)

- [A Novel Model for Vulnerability Analysis through Enhanced Directed Graphs and Quantitative Metrics](https://mlsanity.com/paper/2112.06453/) (2021)

## Abstract (arXiv)

For securing systems, it is essential to manage their vulnerability posture and design appropriate security controls. Vulnerability management allows to proactively address vulnerabilities by incorporating pertinent security controls into systems designs. Current vulnerability management approaches do not support systematic reasoning about the vulnerability postures of systems designs. To effectively manage vulnerabilities and design security controls, we propose a formally grounded automated reasoning mechanism. We integrate the mechanism into an open-source security design tool and demonstrate its application through an illustrative example driven by real-world challenges. The automated reasoning mechanism allows system designers to identify vulnerabilities that are applicable to a specific system design, explicitly specify vulnerability mitigation options, declare selected controls, and thus systematically manage vulnerability postures.