TY - GEN
T1 - Vulnerability evaluation based on CVSS and environmental information statistics
AU - Wang, Shuguang
AU - Xia, Chunhe
AU - Gao, Jinghua
AU - Jia, Qiong
N1 - Publisher Copyright:
© 2015 IEEE.
PY - 2016/6/13
Y1 - 2016/6/13
N2 - In the field of network security, vulnerability evaluation is a very important method to assess the attack and defense means in many practical use, such as penetration testing and safety pre-warning. Up to now, there are a lot of vulnerability evaluate methods, such as CWE, CVSS, and there are a lot of basic evaluate methods for further improvement and optimization. This paper analyzes the existing vulnerability evaluate method and has found some insufficient changes in real-Time environmental. This paper adds some new elements including topology environment factors, as well as log system information statistics, to make sure vulnerability evaluation can be used in a more flexible network security.
AB - In the field of network security, vulnerability evaluation is a very important method to assess the attack and defense means in many practical use, such as penetration testing and safety pre-warning. Up to now, there are a lot of vulnerability evaluate methods, such as CWE, CVSS, and there are a lot of basic evaluate methods for further improvement and optimization. This paper analyzes the existing vulnerability evaluate method and has found some insufficient changes in real-Time environmental. This paper adds some new elements including topology environment factors, as well as log system information statistics, to make sure vulnerability evaluation can be used in a more flexible network security.
KW - CVSS
KW - Environment statistics
KW - network security
KW - vulnerability evaluation
UR - https://www.scopus.com/pages/publications/84979222047
U2 - 10.1109/ICCSNT.2015.7490958
DO - 10.1109/ICCSNT.2015.7490958
M3 - 会议稿件
AN - SCOPUS:84979222047
T3 - Proceedings of 2015 4th International Conference on Computer Science and Network Technology, ICCSNT 2015
SP - 1249
EP - 1252
BT - Proceedings of 2015 4th International Conference on Computer Science and Network Technology, ICCSNT 2015
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 4th International Conference on Computer Science and Network Technology, ICCSNT 2015
Y2 - 19 December 2015 through 20 December 2015
ER -