Text-mining Approach for Estimating Vulnerability Score

被引：0
作者：
Miyamoto, Daisuke [1 ]
Yamamoto, Yasuhiro [2 ]
Nakayama, Masaya [1 ]
机构：
[1] Univ Tokyo, Ctr Informat Technol, Bunkyo Ku, 2-11-16 Yayoi, Tokyo 1138658, Japan
[2] Univ Tokyo, Grad Sch Engn, Bunkyo Ku, Tokyo 1138656, Japan
来源：
2015 4TH INTERNATIONAL WORKSHOP ON BUILDING ANALYSIS DATASETS AND GATHERING EXPERIENCE RETURNS FOR SECURITY (BADGERS) | 2015年
关键词：
D O I：
10.1109/BADGERS.2015.12
中图分类号：
TP301 [理论、方法];
学科分类号：
081202 ;
摘要：
This paper develops a method that can automatically estimate the security metrics of documents written in natural language. Currently, security metrics play an important role in assessing the impact and risks of cyberthreats. Security metrics also enable operators to recognize emerging cyberthreats and to prioritize operations in order to mitigate such threats. In this paper, we focus on estimating the ratings in the Common Vulnerability Scoring System by inspecting the threats described in the Common Vulnerability and Exposures dictionary. Our approach employs various techniques for processing natural language, and it uses the descriptions in the dictionary to estimate the base metrics. This paper also extends the algorithm to increase the accuracy of the estimate.
引用
收藏
页码：67 / 73
页数：7
相关论文
共 24 条
[11]   Improving security using extensible lightweight static analysis [J].
Evans, D ;
Larochelle, D .
IEEE SOFTWARE, 2002, 19 (01) :42-+
[12]  
FIRST. org, FORM INC RESP SEC TE
[13]  
Microsoft, 2002, EL PRIV SQL SERV WEB
[14]  
Microsoft, 2004, SEC UPD MICR WIND MS
[15]  
Microsoft, 2001, UNCH BUFF IND SERV I
[16]  
Microsoft, 2003, BUFF OV RPC INT COUL
[17]  
MITRE Corporation, COMM VULN EXP
[18]  
MITRE Corporation, Common weakness enumeration
[19]   Valgrind: A Framework for Heavyweight Dynamic Binary Instrumentation [J].
Nethercote, Nicholas ;
Seward, Julian .
PLDI'07: PROCEEDINGS OF THE 2007 ACM SIGPLAN CONFERENCE ON PROGRAMMING LANGUAGE DESIGN AND IMPLEMENTATION, 2007, :89-100
[20]  
Neuhaus Stephan, 2010, Proceedings of the 2010 IEEE 21st International Symposium on Software Reliability Engineering (ISSRE 2010), P111, DOI 10.1109/ISSRE.2010.53
123