Anzeige
Erschienen in:
2018 | OriginalPaper | Buchkapitel
An Improved Scoring System for Software Vulnerability Prioritization
verfasst von : Ruchi Sharma, R. K. Singh
Erschienen in: Quality, IT and Business Operations
Verlag: Springer Singapore
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
A number of software vulnerabilities are detected during the software life cycle. Some vulnerabilities are critical and require immediate analysis and plan for their fixation, while the ones with a low damage potential can be left unattended for some time while fixing the more critical ones. Prioritization of vulnerabilities helps in determining order of vulnerability response for increased efficiency and effective utilization of resources. Existing prioritization techniques are static in their approach, and the score once generated remains associated with the vulnerability. However, the impact of the vulnerability will vary over a period of time. In this paper, we proposed a dynamic scoring system for vulnerability prioritization that takes into account two temporal attributes, namely, vulnerability index and remediation level which significantly affects the severity of a vulnerability.