New Vulnerability Scoring System for Risk Assessment

سال انتشار: 1393
نوع سند: مقاله کنفرانسی
زبان: انگلیسی
مشاهده: 455

فایل این مقاله در 9 صفحه با فرمت PDF قابل دریافت می باشد

استخراج به نرم افزارهای پژوهشی:

لینک ثابت به این مقاله:

شناسه ملی سند علمی:

CITCONF02_267

تاریخ نمایه سازی: 19 اردیبهشت 1395

چکیده مقاله:

Currently, because of exponential growth rate of vulnerabilities, one of the most essential requirements for IT managers is to improve network security level by eliminating vulnerabilities that are most hazardous to the network. Achieving this goal requires ranking vulnerabilities based on their peril to the network. Today this target has become possible by introducing open standards such as Common Vulnerability Scoring System (CVSS) for ranking vulnerabilities. But CVSS suffers from basic and serious problems that limit the use of it for efficient vulnerability scoring. One constraint is its limited diversity of scores that a small set of discrete values are used for ranking large amount of vulnerabilities. Another challenge is that, CVSS does not score features of the vulnerability that changes over time such as emerging mitigation techniques for it. By considering these limitations, In this paper we developed a Vulnerability Scoring System that assess the risk of each known vulnerability based on its intrinsic and temporal features with suitable diversity in comparison to CVSS. In this paper we also had a novel improvement in comparison to Impact parameter of CVSS for measuring the effect of vulnerability exploiting on security parameters of the network.

کلیدواژه ها:

نویسندگان

Marjan keramati

Semnan University, Semnan, Iran

مراجع و منابع این مقاله:

لیست زیر مراجع و منابع استفاده شده در این مقاله را نمایش می دهد. این مراجع به صورت کاملا ماشینی و بر اساس هوش مصنوعی استخراج شده اند و لذا ممکن است دارای اشکالاتی باشند که به مرور زمان دقت استخراج این محتوا افزایش می یابد. مراجعی که مقالات مربوط به آنها در سیویلیکا نمایه شده و پیدا شده اند، به خود مقاله لینک شده اند :
  • Thaier Hamid, Carsten Maple and Paul Sant. Articlت Methodologies to ...
  • http://www. first.org/cvss/ (accessed January, 27, 2014) ...
  • http : //cwe. mitre. org/(accessed January, 27, 2014) ...
  • HyunChul Joh and Yashwant K. Malaiya, "A Framework for Software ...
  • Massimiliano Albanese, Sushil Jajodia, Anoop Singhal, Lingyu Wang, :An efficient ...
  • Lingyu Wang, Sushil Jajodia, Anoop Singhal, Pengsu Cheng, Steven Noel: ...
  • H. Joh and Y. K. Malaiya, "Defining and Assessing Quantitative ...
  • http : // searchsecurity. techtarget. _ O m/d efinition/no nrepudiation ...
  • https : //www _ owasp. org/index. php/Repudi ation_Attack (accessed January, ...
  • http : //www. cvedetail S _ _ O m/v ulnerab ...
  • نمایش کامل مراجع