[crankylinuxuser]

Or it can be seen as "we need some standard, so we'll use NIST".

Then the data is at least normalized with respect to NIST.

[SiempreViernes]

You'll have to explain why using a single database, when there are several available that focus on being extra reliable on different elements, is a defensible choice.

I fully understand "let's just use NIST because that's easiest", but that's not a serious attitude if you want to claim something about reality rather than the NIST database itself.

[crankylinuxuser]

I see that you only attacked the data source, NIST. You didn't attack/discuss normalization of said data, which was 1/2 of what I said.

[SiempreViernes]

What normalisation? There's certainly no clear talk of normalisation in the paper.