Loading [a11y]/accessibility-menu.js
Automated Calculation of CVSS v3.1 Temporal Score Based on Apache Log4j 2021 Vulnerabilities | IEEE Conference Publication | IEEE Xplore

Automated Calculation of CVSS v3.1 Temporal Score Based on Apache Log4j 2021 Vulnerabilities


Abstract:

Common Vulnerability Scoring System (CVSS) is a well-established standard for an evaluation of vulnerability criticality of Information and Communication Technology (ICT)...Show More

Abstract:

Common Vulnerability Scoring System (CVSS) is a well-established standard for an evaluation of vulnerability criticality of Information and Communication Technology (ICT) infrastructure. An analysis was performed aimed at selected vulnerabilities, considering their base score, temporal score, reporting and exploit availability through time. Data obtained using publicly available sources, including National Vulnerability Database (NVD), ExploitDB and AttackerKB, reports and social media posts, were analyzed using a dedicated python application. Obtained results contribute to the basic research seeking to establish automated temporal score calculation that allows to assess the likelihood of exploitation for a given vulnerability.
Date of Conference: 21-23 September 2023
Date Added to IEEE Xplore: 10 October 2023
Print on Demand(PoD) ISBN:979-8-3503-0107-6
Electronic ISSN: 1847-358X
Conference Location: Split, Croatia

Funding Agency:


Contact IEEE to Subscribe

References

References is not available for this document.