VuWaDB: A Vulnerability Workaround Database

VuWaDB: A Vulnerability Workaround Database

Atefeh Khazaei, Mohammad Ghasemzadeh, Christoph Meinel
Copyright: © 2018 |Volume: 12 |Issue: 4 |Pages: 11
ISSN: 1930-1650|EISSN: 1930-1669|EISBN13: 9781522543091|DOI: 10.4018/IJISP.2018100102
Cite Article Cite Article

MLA

Khazaei, Atefeh, et al. "VuWaDB: A Vulnerability Workaround Database." IJISP vol.12, no.4 2018: pp.24-34. http://doi.org/10.4018/IJISP.2018100102

APA

Khazaei, A., Ghasemzadeh, M., & Meinel, C. (2018). VuWaDB: A Vulnerability Workaround Database. International Journal of Information Security and Privacy (IJISP), 12(4), 24-34. http://doi.org/10.4018/IJISP.2018100102

Chicago

Khazaei, Atefeh, Mohammad Ghasemzadeh, and Christoph Meinel. "VuWaDB: A Vulnerability Workaround Database," International Journal of Information Security and Privacy (IJISP) 12, no.4: 24-34. http://doi.org/10.4018/IJISP.2018100102

Export Reference

Mendeley
Favorite Full-Issue Download

Abstract

This paper introduces VuWaDB, which is a database for vulnerability workarounds. When faced with a newly discovered vulnerability, experts tend to use workarounds in order to mitigate the risks until a patch is issued by the vendor. Currently, the available vulnerability databases suffer from the lack of comprehensive workaround solutions. Furthermore, the presented workarounds are only limited to a few vulnerabilities but also poorly recorded in natural language sentences and plain text format. In order to construct VuWaDB, first, the related information was gathered from a number of well-known vulnerability databases and then extracted, analyzed, and labeled. In this regard, VuWaDB organizes the workarounds in six categories: configuration, modify code, redirect, remove, restrict access and, utility tool. Lastly, it was analyzed from the statistical point of view.

Request Access

You do not own this content. Please login to recommend this title to your institution's librarian or purchase it from the IGI Global bookstore.