.png){kind=icon}
Return
Improving VRSS-based vulnerability prioritization using analytic hierarchy process
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jss.2012.03.057.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
The number of vulnerabilities discovered in computer systems has increased explosively. Thus, a key question for system administrators is which vulnerabilities to prioritize. The need for vulnerability prioritization in organizations is widely recognized. The significant role of the vulnerability evaluation system is to separate vulnerabilities from each other as far as possible. There are two major methods to assess the severity of vulnerabilities: qualitative and quantitative methods. In this paper, we first describe the design space of vulnerability evaluation methodology and discuss the measures of well-defined evaluation framework. We analyze 11,395 CVE vulnerabilities to expose the differences among three current vulnerability evaluation systems (X-Force, CVSS and VRSS). We find that vulnerabilities are not separated from each other as much as possible. In order to increase the diversity of the results, we firstly enable vulnerability type to prioritize vulnerabilities using analytic hierarchy process on the basis of VRSS. We quantitatively characterize the vulnerability type and apply the method on the set of 11,395 CVE vulnerabilities. The results show that the quality of the quantitative scores can be improved with the help of vulnerability type. (C) 2012 Elsevier Inc. All rights reserved.
Keywords:
Vulnerability evaluation
Vulnerability prioritization
Vulnerability type
Analytic hierarchy process
AI Summary
Key information extracted from the uploaded paper, including a brief overview, abstract, background, key highlights, visual analysis, and future outlook.
Journal
IF:
4.1
Papers:
5.4K
Citations:
8.4K
Organization
Cited Papers
Chromis-1, a Ratiometric Fluorescent Probe Optimized for Two-Photon Microscopy Reveals Dynamic Changes in Labile Zn(II) in Differentiating Oligodendrocytes.png)
ACS Sensors
OAAI
ACS SensorsIF0
OAAIShareSaveShareSaveShareSaveSerum Angiopoietin-1 and -2 Levels Discriminate Cerebral Malaria from Uncomplicated Malaria and Predict Clinical Outcome in African ChildrenPLoS ONEOAAI
PLoS ONEIF0
OAAIShareSaveUsing Local Flaps in a Chest Wall Reconstruction after Mastectomy for Locally Advanced Breast CancerOAAI
OAAIShareSaveShareSave no more
no more