返回
Improving VRSS-based vulnerability prioritization using analytic hierarchy process
DOI:10.1016/j.jss.2012.03.057.png)
摘要
En 中文
The number of vulnerabilities discovered in computer systems has increased explosively. Thus, a key question for system administrators is which vulnerabilities to prioritize. The need for vulnerability prioritization in organizations is widely recognized. The significant role of the vulnerability evaluation system is to separate vulnerabilities from each other as far as possible. There are two major methods to assess the severity of vulnerabilities: qualitative and quantitative methods. In this paper, we first describe the design space of vulnerability evaluation methodology and discuss the measures of well-defined evaluation framework. We analyze 11,395 CVE vulnerabilities to expose the differences among three current vulnerability evaluation systems (X-Force, CVSS and VRSS). We find that vulnerabilities are not separated from each other as much as possible. In order to increase the diversity of the results, we firstly enable vulnerability type to prioritize vulnerabilities using analytic hierarchy process on the basis of VRSS. We quantitatively characterize the vulnerability type and apply the method on the set of 11,395 CVE vulnerabilities. The results show that the quality of the quantitative scores can be improved with the help of vulnerability type. (C) 2012 Elsevier Inc. All rights reserved.
Keyword:
Vulnerability evaluation
Vulnerability prioritization
Vulnerability type
Analytic hierarchy process
AI总结
对已上传原文的论文进行重点信息的提取,主要内容包括:简要概述、研究摘要、背景介绍、关键亮点、图文解析、展望与总结。
期刊
IF:
4.1
论文数:
5.4K
被引数:
8.4K
机构
引用论文
Chromis-1, a Ratiometric Fluorescent Probe Optimized for Two-Photon Microscopy Reveals Dynamic Changes in Labile Zn(II) in Differentiating Oligodendrocytes
ACS Sensors
IF0
Serum Angiopoietin-1 and -2 Levels Discriminate Cerebral Malaria from Uncomplicated Malaria and Predict Clinical Outcome in African Children
PLoS ONE
IF0
Using Local Flaps in a Chest Wall Reconstruction after Mastectomy for Locally Advanced Breast Cancer
没有更多内容

