arrow
返回

Improving VRSS-based vulnerability prioritization using analytic hierarchy process

delete2012-08-01
delete47
PRE
AI
Q
Qixu Liu *
Y
Yuqing Zhang
Y
Ying Kong
Q
Qianru Wu
DOI:10.1016/j.jss.2012.03.057delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
The number of vulnerabilities discovered in computer systems has increased explosively. Thus, a key question for system administrators is which vulnerabilities to prioritize. The need for vulnerability prioritization in organizations is widely recognized. The significant role of the vulnerability evaluation system is to separate vulnerabilities from each other as far as possible. There are two major methods to assess the severity of vulnerabilities: qualitative and quantitative methods. In this paper, we first describe the design space of vulnerability evaluation methodology and discuss the measures of well-defined evaluation framework. We analyze 11,395 CVE vulnerabilities to expose the differences among three current vulnerability evaluation systems (X-Force, CVSS and VRSS). We find that vulnerabilities are not separated from each other as much as possible. In order to increase the diversity of the results, we firstly enable vulnerability type to prioritize vulnerabilities using analytic hierarchy process on the basis of VRSS. We quantitatively characterize the vulnerability type and apply the method on the set of 11,395 CVE vulnerabilities. The results show that the quality of the quantitative scores can be improved with the help of vulnerability type. (C) 2012 Elsevier Inc. All rights reserved.
Keyword:
Vulnerability evaluation
Vulnerability prioritization
Vulnerability type
Analytic hierarchy process
AI总结

AI总结

对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。

期刊

Journal of Systems and Software 封面图
Journal of Systems and Software
IF:
4.1
论文数:
5.4K
被引数:
8.4K

机构

C
chinese academy of sciences
学者数:
56.7W
论文数: 45.0W
被引数: 704
引用论文

引用论文

Chromis-1, a Ratiometric Fluorescent Probe Optimized for Two-Photon Microscopy Reveals Dynamic Changes in Labile Zn(II) in Differentiating Oligodendrocytes
err2018-02-12
err0
errOAAI
errDaisy Bourassa; Christopher M. Elitt; Adam M. McCallum; S. Sumalekshmy; Reagan L. McRae; M. Thomas Morgan; Nisan Siegel; Joseph W. Perry; Paul A. Rosenberg; Christoph J. Fahrni
err分享
err收藏
Endodermal expression of Nkx6 genes depends differentially on Pdx1
err2005-12-01
err0
errOAAI
errJesper K. Pedersen; Shelley B. Nelson; Mette C. Jorgensen; Korinna D. Henseleit; Yoshio Fujitani; Chris V.E. Wright; Maike Sander; Palle Serup
err分享
err收藏
Serum Angiopoietin-1 and -2 Levels Discriminate Cerebral Malaria from Uncomplicated Malaria and Predict Clinical Outcome in African Children
err2009-03-20
err0
errOAAI
errFiona E. Lovegrove; Noppadon Tangpukdee; Robert O. Opoka; Erin I. Lafferty; Nimerta Rajwans; Michael Hawkes; Srivicha Krudsood; Sornchai Looareesuwan; Chandy C. John; W. Conrad Liles; Kevin C. Kain
err分享
err收藏
Quantifying security risk level from CVSS estimates of frequency and impact
err2010-09-01
err79
PREAI
errHoumb, Siv Hilde; Franqueira, Virginia N. L.; Engum, Erlend A.
err分享
err收藏
没有更多内容