Improving the common vulnerability scoring system

IET Information Security

Volumn 1, Issue 3, 2007, Pages 119-127

  Mell, P ^a   Scarfone, K ^a  

^a NATIONAL INSTITUTE OF STANDARDS AND TECHNOLOGY   (United States)

Author keywords

[No Author keywords available]

Indexed keywords

MEASUREMENT THEORY; SET THEORY;

SCORING SYSTEM; VULNERABILITIES;

SECURITY OF DATA;

EID: 34648837018     PISSN: 17518709     EISSN: 17518717     Source Type: Journal    
DOI: 10.1049/iet-ifs:20060055     Document Type: Article

References (9)

1. Schiffman, M.: ' A complete guide to the common vulnerability scoring system ', 2005, Available at: http://www.first.org/cvss/cvss-guide.html, accessed 9 March 2006
2. Forum of Incident Response and Security Teams (FIRST). FIRST web site, 2006. Available at: http://www.first.org/, accessed 9 March 2006
3. United States Computer Emergency Readiness Team (US-CERT). US-CERT vulnerability note field descriptions, 2006. Available at: http://www.kb.cert. org/vuls/html/fieldhelp, accessed 9 March 2006
4. SANS Institute. SANS critical vulnerability analysis archive. Undated. Available at: http://www.sans.org/newsletters/cva/, accessed 9 March 2006
5. Microsoft Corporation. Microsoft security response center security bulletin severity rating system, 2002. Available at: http://www.microsoft.com/ technet/security/bulletin/rating.mspx, accessed 9 March 2006
6. Qualys. Vulnerability severity levels defined. Undated. Available at: http://www.qualys.com/research/rnd/knowledge/severity/, accessed 9 March 2006
7. The MITRE Corporation. Common vulnerabilities and exposures, 2006. Available at: http://cve.mitre.org/, accessed 9 March 2006
8. National Vulnerability Database. Available at: http://nvd.nist.gov/
9. CVSS Management Team listing. Available at: http://www.first.org/cvss/ team/