Abstract:Understanding the landscape of software vulnerabilities is key for developing effective security solutions. Fortunately, the evaluation of vulnerability databases that use a framework for communicating vulnerability attributes and their severity scores, such as the Common Vulnerability Scoring System (CVSS), can help shed light on the nature of publicly published vulnerabilities. In this paper, we characterize the software vulnerability landscape by performing a historical and statistical analysis of CVSS vulnerability metrics over the period of 2005 to 2019 through using data from the National Vulnerability Database. We conduct three studies analyzing the following: the distribution of CVSS scores (both empirical and theoretical), the distribution of CVSS metric values and how vulnerability characteristics change over time, and the relative rankings of the most frequent metric value over time. Our resulting analysis shows that the vulnerability threat landscape has been dominated by only a few vulnerability types and has changed little during the time period of the study. The overwhelming majority of vulnerabilities are exploitable over the network. The complexity to successfully exploit these vulnerabilities is dominantly low; very little authentication to the target victim is necessary for a successful attack. And most of the flaws require very limited interaction with users. However on the positive side, the damage of these vulnerabilities is mostly confined within the security scope of the impacted components. A discussion of lessons that could be learned from this analysis is presented.

Assessment of windows system security using vulnerability relationship graph

Integrated quantitative assessment of mainstream operating systems' security vulnerabilities

Computer Network System Security Assessment Method.

RISK-BASED VULNERABILITY ASSESSMENT IN COMPLEX POWER SYSTEMS

Vulnerability Assessment on WAMS Communication System Based on Attack Tree Model

Risk Based Vulnerability Assessment for Hvdc Transmission System

Study of Generating Attack Graph Based on Privilege Escalation for Computer Networks

Computer vulnerability evaluation using fault tree analysis

VOLTAGE VULNERABILITY ASSESSMENT BASED ON RISK THEORY AND FUZZY REASONING

A Quantitative Risk Assessment Approach for Host System Security

A Quantitative Method for Evaluating Network Security Based on Attack Graph.

A Mining Method for Computer Vulnerability Correlation

A Historical and Statistical Studyof the Software Vulnerability Landscape

Quantitative Vulnerability Assessment of Cyber Security for Distribution Automation Systems

An Approach Based on Attack Graph for Security Assessment 0f Network

Research on Automatic Generation and Analysis Technology of Network Attack Graph

Software security vulnerability exploitation method based on a security patch

Risk Assessment Graphs: Utilizing Attack Graphs for Risk Assessment

Attack Graph Generation based on Security Administrator Information

Vulnerability Detection System Based on Taint Range Propagation Analysis

Vulnerability Assessment for ICS System Based on Zero-day Attack Graph