Temporal metrics for software vulnerabilities

CSIIRW'08 - 4th Annual Cyber Security and Information Intelligence Research Workshop: Developing Strategies to Meet the Cyber Security and Information Intelligence Challenges Ahead

Volumn , Issue , 2008, Pages

  Wang, Ju An ^a   Zhang, Fengwei ^a   Xia, Min ^a  

^a SOUTHERN POLYTECHNIC STATE UNIVERSITY   (United States)

Author keywords

Common vulnerability scoring system; Information security; Metrics and measurement; Threats and vulnerabilities

Indexed keywords

AUTOMATED SUPPORTS; AUTOMATED TOOLS; COMMON VULNERABILITY SCORING SYSTEM; COMPUTING ENVIRONMENTS; EFFECTIVE TOOLS; FORMAL MODELS; INFORMATION ASSETS; INFORMATION SECURITY; INFORMATION SECURITY PROFESSIONALS; METRICS AND MEASUREMENT; SECURITY CONTROLS; SECURITY METRICS; SOFTWARE VULNERABILITIES; THREATS AND VULNERABILITIES; TIME DEPENDENTS;

EID: 78650760840     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1413140.1413191     Document Type: Conference Paper

References (11)

1. Peter Mell, Karen Scarfone, and Sasha Romanosky, A Complete Guide to the Common Vulnerability Scoring System (CVSS), Version 2.0, Forum of Incident Response and Security Teams, http://www.first.orjr/cvss/cvss-guide.html (July 2007).
2. J. A. Wang, M. Xia, and F. Zhang, "Metrics for Information Security Vulnerabilities, Journal of Applied Global Research, Volume 1, No. 1, 2008, pp. 48-58.
3. rd ACM Southeast Conference, Volume 2, pp. 178 -184. ISBN: 1-59593-059-0. March 2005, Kennesaw, GA.
4. Oracle Corporation, The Critical Patch Update, http://www.oracle.com/ technologv/deplov/securitv/critical-patch-updates/cpuoct2006.html.
5. CISCO Security Advisory: Application Inspection Vulnerability in CISCO Firewall Services Module, http://www.cisco.com/en/US/produ.cts/products- security-advisory0 9186a008091b11d.shtml.
6. Elizabeth Chew et al., Guide for Developing Performance Metrics for Information Security, NIST Special Publication 800-80, May 2006.
7. The SANS Institute, SANS Top-20 2007 Security Risks, http://www.sans.org/ top20/. accessed on February 20, 2008.
8. Marianne Swanson et al., Security Metrics Guide for Information Technology Systems, NISTSpecial Publication 800-55, July 2003.
9. CISCO Document ID: 100389, http://www.cisco.com/warp/public/707/cisco-sa- 20071219-fwsm.shtml.
10. CISCO Document ID: 100374, http://www.cisco.com/warp/public/707/cisco-sa- 20080326mvpn.shtml.
11. National Vulnerability Database, Common Vulnerability Scoring System Calculator, http://nvd.nist.gov/cvss.cfm?calculator.