CROP: Surfacing attack-relevant vulnerabilities across products via CPE-rooted ontology and node pruning

Researchers developed CROP, a method that uses CPE (Common Platform Enumeration, a standardized way to name software products and versions) and node pruning (removing unnecessary data points) to identify which vulnerabilities are most relevant for attack across different software products. The approach helps security teams prioritize which security risks pose the greatest threat by understanding how vulnerabilities connect across the software ecosystem.