The Life and Times of Zero-Day Vulnerabilities and Their Exploits

http://www.rand.org/pubs/research_reports/RR1751.html