Scholarlink

The Common Vulnerabilities and Exposures (CVE) database lists a large number of vulnerabilities that are present in specific versions of software libraries and applications, but although there is a severity ranking, it does not immediately follow that an identified vulnerability with high severity will be particularly important for a specific application. This paper presents the motivation for CVE Prioritization for a given case and describes an outline process for evaluating the priority of CVEs via risk assessment simulations.

错误：搜索内容不能为空，请输入英文关键词
错误：关键词超出字数限制，请精简
高级检索

Cybersecurity Vulnerability Prioritisation via Risk Assessment

  • 会议论文

  • 发表日期：

    2025年

查看全文
  • Steve Taylor,
  • Panos Melas,
  • Mike Surridge,
  • Paolo De Lutiis,
  • Manuel Leone,
  • Martin Gilje Jaatun,
  • Ravishankar Borgaonkar

摘要

The Common Vulnerabilities and Exposures (CVE) database lists a large number of vulnerabilities that are present in specific versions of software libraries and applications, but although there is a severity ranking, it does not immediately follow that an identified vulnerability with high severity will be particularly important for a specific application. This paper presents the motivation for CVE Prioritization for a given case and describes an outline process for evaluating the priority of CVEs via risk assessment simulations.