Evaluation of severity index of vulnerability categories
by Anshu Tripathi; Umesh Kumar Singh
International Journal of Information and Computer Security (IJICS), Vol. 5, No. 4, 2013

Abstract: Proper and timely vulnerability mitigation is essential to ensure network security. Vulnerability categorisation plays a major role in this regard by increasing objectivity of security assessment process. Further, it suggests doing assessment of severity level of vulnerability categories to prioritise them relatively. That in turn leads in developing better risk mitigation strategies by addressing multiple vulnerabilities of same genre simultaneously. In this direction, this paper proposes an algorithm to evaluate severity index of vulnerability categories focusing on vulnerability characteristics and relative distribution of vulnerability population. Proposed algorithm applied on 22846 vulnerabilities listed by NVD which are categorised under 23 categories and further severity index for all the 23 categories were calculated.

Online publication date: Wed, 30-Jul-2014

The full text of this article is only available to individual subscribers or to users at subscribing institutions.

 
Existing subscribers:
Go to Inderscience Online Journals to access the Full Text of this article.

Pay per view:
If you are not a subscriber and you just want to read the full contents of this article, buy online access here.

Complimentary Subscribers, Editors or Members of the Editorial Board of the International Journal of Information and Computer Security (IJICS):
Login with your Inderscience username and password:

Username:        Password:          Forgotten your password?

Want to subscribe?
A subscription gives you complete access to all articles in the current issue, as well as to all articles in the previous three years (where applicable). See our Orders page to subscribe.

If you still need assistance, please email subs@inderscience.com