Fighting N-day vulnerabilities with automated CVSS vector prediction at disclosure

Author:

Elbaz Clément1,Rilling Louis2,Morin Christine3

Affiliation:

1. Univ Rennes, Inria, CNRS, IRISA, Rennes, France

2. DGA, Rennes, France

3. Inria, Rennes, France

Funder

Brittany Council

Publisher

ACM

Reference26 articles.

1. 2020-08-04. A Complete Guide to the Common Vulnerability Scoring System: Version 2.0. https://www.first.org/cvss/v2/guide. 2020-08-04. A Complete Guide to the Common Vulnerability Scoring System: Version 2.0. https://www.first.org/cvss/v2/guide.

2. 2020-08-04. AWS WAF - Web Application Firewall. https://aws.amazon.com/waf/. 2020-08-04. AWS WAF - Web Application Firewall. https://aws.amazon.com/waf/.

3. 2020-08-04. Cloudflare - Inside Shellshock: How hackers are using it to exploit systems. https://blog.cloudflare.com/inside-shellshock/. 2020-08-04. Cloudflare - Inside Shellshock: How hackers are using it to exploit systems. https://blog.cloudflare.com/inside-shellshock/.

4. 2020-08-04. Cloudflare - Stopping SharePoint's CVE-2019-0604. https://blog.cloudflare.com/stopping-cve-2019-0604/. 2020-08-04. Cloudflare - Stopping SharePoint's CVE-2019-0604. https://blog.cloudflare.com/stopping-cve-2019-0604/.

5. 2020-08-04. Cloudflare Web Application Firewall. https://www.cloudflare.com/waf/. 2020-08-04. Cloudflare Web Application Firewall. https://www.cloudflare.com/waf/.

Cited by 25 articles. 订阅此论文施引文献 订阅此论文施引文献,注册后可以免费订阅5篇论文的施引文献,订阅后可以查看论文全部施引文献

1. Comparison of Methods for Automatically Predicting CVSS Base Vector;2024 IEEE 48th Annual Computers, Software, and Applications Conference (COMPSAC);2024-07-02

2. Early and Realistic Exploitability Prediction of Just-Disclosed Software Vulnerabilities: How Reliable Can It Be?;ACM Transactions on Software Engineering and Methodology;2024-06-27

3. A Survey on Software Vulnerability Exploitability Assessment;ACM Computing Surveys;2024-04-26

4. Network Asset Vulnerability Assessment Model Based on QPSO-LightGBM;Lecture Notes in Electrical Engineering;2024

5. Comparative Analysis of Machine Learning Methods in Vulnerability Categories Prediction Based on Configuration Similarity;Studies in Computational Intelligence;2024

同舟云学术

1.学者识别学者识别

2.学术分析学术分析

3.人才评估人才评估

"同舟云学术"是以全球学者为主线,采集、加工和组织学术论文而形成的新型学术文献查询和分析系统,可以对全球学者进行文献检索和人才价值评估。用户可以通过关注某些学科领域的顶尖人物而持续追踪该领域的学科进展和研究前沿。经过近期的数据扩容,当前同舟云学术共收录了国内外主流学术期刊6万余种,收集的期刊论文及会议论文总量共计约1.5亿篇,并以每天添加12000余篇中外论文的速度递增。我们也可以为用户提供个性化、定制化的学者数据。欢迎来电咨询!咨询电话:010-8811{复制后删除}0370

www.globalauthorid.com

TOP

Copyright © 2019-2024 北京同舟云网络信息技术有限公司
京公网安备11010802033243号  京ICP备18003416号-3