Take a sneak peek at the new NIST.gov and let us know what you think!
(Please note: some content may not be complete on the beta site.).
NIST Authors in Bold
|Author(s):||Peter M. Mell; Karen A. Scarfone;|
|Title:||Improving the Common Vulnerability Scoring System|
|Published:||September 28, 2007|
|Abstract:||The Common Vulnerability Scoring System is an emerging standard for scoring the impact of vulnerabilities. This paper presents the results of our analysis of the scoring system and the results of our experiment scoring a large set of vulnerabilities using the standard. While the scoring system was found to be useful, it contains a variety of deficiencies that limit its ability to measure the impact of vulnerabilities. We demonstrate how these deficiencies could be addressed in subsequent versions of the standards and how these changes can be backwards-compatible with existing scoring efforts.|
|Citation:||Institution of Engineering and Technology (IET) Information Security|
|PDF version:||Click here to retrieve PDF version of paper (776KB)|