The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems

No abstract is available for this paper.

• Publication year

  2007

• Venue

  Unknown venue

• Publication date

  2007-08-30

• Fields of study

  Computer Science

• Identifiers
  DOI 10.6028/NIST.IR.7435
• External record

  Open on Semantic Scholar

• Source metadata

  Semantic Scholar

• No claims are published for this paper.

• No concepts are published for this paper.

• The Common Vulnerability Scoring System (CVSS)

  2007cited by this paper
• Common Vulnerability Scoring System

  2006cited by this paper
• APPENDIX B. REFERENCES

  2006cited by this paper

• Cost-Aware Cyber-Threat Mitigation Framework for Critical Infrastructure Environment

  2026cites this paper
• Towards Technology-Based Regulation of China-Made IoT Surveillance IP Cameras: The Case Study of Australia

  2025cites this paper
• Semantics-Aligned, Curriculum-Driven, and Reasoning-Enhanced Vulnerability Repair Framework

  2025cites this paper
• A Scalable Game-Theoretic Approach for Selecting Security Controls from Standardized Catalogues

  2025cites this paper
• Prompting the Priorities: A First Look at Evaluating LLMs for Vulnerability Triage and Prioritization

  2025cites this paper
• Iomt Data Server Risks and Vulnerabilities

  2025cites this paper
• RiskNet: Graph Neural Networks for Predictive Cyber Risk Propagation Across Interdependent Digital Assets in Enterprises

  2025cites this paper
• Federated Learning: Attacks and Defenses, Rewards, Energy Efficiency: Past, Present and Future

  2024cites this paper
• Predictive Shield: Harnessing Machine Learning to Forecast Vulnerability Exploitability

  2024cites this paper
• Elevating Software Trust: Unveiling and Quantifying the Risk Landscape

  2024influential citation
• From Exploit Prediction in the Wild to System-Specific Cyber Security Risk Metrics: Work in Progress

  2024cites this paper
• A Game-Theoretic Approach for Security Control Selection

  2024cites this paper
• When eBPF Meets Machine Learning: On-the-fly OS Kernel Compartmentalization

  2024cites this paper
• Probing the depths: assessing the efficacy of the two-tier deception-driven security model

  2024cites this paper
• A function-aware mimic defense theory and its practice

  2024cites this paper
• SPGNN-API: A Transferable Graph Neural Network for Attack Paths Identification and Autonomous Mitigation

  2023cites this paper
• Unveiling the Landscape of Operating System Vulnerabilities

  2023cites this paper
• Towards Universal Metrics for Hardware Cybersecurity Assessment

  2023cites this paper
• Bulletin of Electrical Engineering and Informatics

  2022cites this paper
• A Taxonomy of Software Flaws Leading to Buffer Overflows

  2022cites this paper
• Towards a Zero-Trust Micro-segmentation Network Security Strategy: An Evaluation Framework

  2021influential citation
• Twin Based Continuous Patching To Minimize Cyber Risk

  2021influential citation
• Current State of IPv6 Security in IoT

  2021cites this paper
• Leveraging External Data Sources to Enhance Secure System Design

  2021cites this paper
• MCOQR (Misuse Case-Oriented Quality Requirements) Metrics Framework

  2021cites this paper
• TRADE: TRusted Anonymous Data Exchange: Threat Sharing Using Blockchain Technology

  2021cites this paper
• Hardware Vulnerability Description, Sharing and Reporting: Challenges and Opportunities

  2021cites this paper
• An Effective Tool for Assessing the Composite Vulnerability of Multifactor Authentication Technologies

  2021cites this paper
• Managing Industrial Control Systems Security Risks for Cyber Insurance (Dagstuhl Seminar 21451)

  2021cites this paper
• CVSS: Ubiquitous and Broken

  2021cites this paper
• Online Learning Methods for Controlling Dynamic Cyber Deception Strategies

  2020cites this paper
• Machine Learning Approach to Predict Computer Operating Systems Vulnerabilities

  2020cites this paper
• Evaluating the Soundness of Security Metrics from Vulnerability Scoring Frameworks

  2020cites this paper
• A Threat Analysis Methodology for Security Requirements Elicitation in Machine Learning Based Systems

  2020cites this paper
• Obtaining high preventive and resilience capacities in critical infrastructure by industrial automation cells

  2020cites this paper
• Docker Container Security in Cloud Computing

  2020cites this paper
• On Security Measures for Containerized Applications Imaged with Docker

  2020cites this paper
• A framework for automated evaluation of security metrics

  2020cites this paper
• Evaluating the Exploitability of Implicit Interactions in Distributed Systems

  2020cites this paper
• Multi-layer Network Attack and Defense Model Based on Entropy Method to Measure Network Security

  2019cites this paper
• Challenges in Quantifying an Adversary's Cyber Access to Critical Infrastructures

  2019cites this paper
• Container Based Analysis Tool for Vulnerability Prioritization in Cyber Security Systems

  2019cites this paper
• Modeling Stepping Stone Attacks with Constraints in Cyber Infrastructure

  2019cites this paper
• A Multi-Agent Systems Approach for Analysis of Stepping Stone Attacks

  2019cites this paper
• Security Analysis and Access Control Enforcement through Software Defined Networks

  2018cites this paper
• A Network Vulnerability Assessment Method Based on Attack Graph

  2018cites this paper
• Cyber Attacks in Cloud Computing: Modelling Multi-stage Attacks using Probability Density Curves

  2018cites this paper
• Determination of Security Threat Classes on the basis of Vulnerability Analysis for Automated Countermeasure Selection

  2018cites this paper
• Predicting Exploitations of Information Systems Vulnerabilities Through Attackers’ Characteristics

  2017cites this paper
• Erschließung, Optimierung und Bewertung von Verwundbarkeitsanalysen mittels öffentlich zugänglicher Suchmaschinen

  2017influential citation
• A Security Vulnerability Threat Classification Method

  2017cites this paper
• Critical Information Infrastructures Security

  2017cites this paper
• Analytical attack modeling and security assessment based on the common vulnerability scoring system

  2017cites this paper
• Adapting Honeypot Configurations to Detect Evolving Exploits

  2017cites this paper
• Adapting with Honeypot Configurations to Detect Evolving Exploits

  2017cites this paper
• SCORING SYSTEM AS A METHOD OF IMPROVING IT VULNERABILITY STATUS

  2016cites this paper
• CZECH TECHNICAL UNIVERSITY IN PRAGUE Faculty of electrical engineering BACHELOR THESIS

  2016cites this paper
• Guide to Cyber Threat Information Sharing

  2016cites this paper
• A System for Response and Prevention of Security Incidents in Wireless Sensor Networks

  2016cites this paper
• Verwundbarkeitsprüfungen mit Shodan

  2016influential citation
• Security Risk Scoring Incorporating Computers' Environment

  2016cites this paper
• Evaluating Damage Potential in Security Risk Scoring Models

  2016cites this paper
• Measuring and Improving the Effectiveness of Defense-in-Depth Postures

  2016cites this paper
• Asset-Centric Security Risk Assessment of Software Components

  2016cites this paper
• An evolutionary approach for security metric

  2015cites this paper
• Effect of network infrastructure factors on information system risk judgments

  2015cites this paper
• Extending trust in enterprise systems

  2015cites this paper
• The CAPEC based generator of attack scenarios for network security evaluation

  2015cites this paper
• An OpenFlow-based collaborative intrusion prevention system for cloud networking

  2015cites this paper
• Improvement of EIGRP protocol routing algorithm based on information security metrics

  2015cites this paper
• ASArP: Automated Security Assessment & Audit of Remote Platforms using TCG-SCAP synergies

  2015cites this paper
• An expert-based investigation of the Common Vulnerability Scoring System

  2015cites this paper
• Using CVSS to quantitatively analyze risks to software caused by vulnerabilities

  2015cites this paper
• A Study On Advanced Model of Web Vulnerability Scoring Technique

  2015cites this paper
• A framework to facilitate cyber defense situational awareness modeled in an emulated virtual machine testbed

  2015cites this paper
• Improvement of EIGRP Protocol Routing Algorithm with the Consideration of Information Security Risk Parameters

  2015cites this paper
• An empirical test of the accuracy of an attack graph analysis tool

  2015influential citation
• Master of Science Thesis in Computer Systems and Networks

  2014cites this paper
• A Software Vulnerability Rating Approach Based on the Vulnerability Database

  2014cites this paper
• Bringing Visibility in the Clouds: using Security, Transparency and Assurance Services

  2014influential citation
• Configuration Management of iOS Devices based on SCAP

  2014cites this paper
• Data Model for Android Package Information and Its Application to Risk Analysis System

  2014cites this paper
• Towards a Vulnerability Tree Security Evaluation of OpenStack's Logical Architecture

  2014cites this paper
• An Incident Object Description Exchange Format (IODEF) Extension for Structured Cybersecurity Information

  2014cites this paper
• Threat Modelling and Risk Assessment Within Vehicular Systems

  2014influential citation
• Modeling and analysis of stepping stone attacks

  2014cites this paper
• Streamlining Compliance Validation Through Automation Processes

  2014cites this paper
• Kinesis: a security incident response and prevention system for wireless sensor networks

  2014cites this paper
• Prevention of Vulnerable Virtual Machines against DDOS Attacks in the Cloud

  2014cites this paper
• Change to survive: a Moving Target Defense approach to secure resource-constrained distributed devices

  2013cites this paper
• NICE: Network Intrusion Detection and Countermeasure Selection in Virtual Network Systems

  2013cites this paper
• Modeling Cyber Situational Awareness Through Data Fusion

  2013influential citation
• Real-Time Risk sk Risk Assessment t Assessment of f of Network ork Network Security rity Security Based ased Based on n on Attack tack Attack Graphs aphs Graphs

  2013cites this paper
• Real-Time Risk Assessment of Network Security Based on Attack Graphs

  2013cites this paper
• The system of dynamic software security and reliability analysis with high-performance

  2013cites this paper
• Continuous security evaluation and auditing of remote platforms by combining trusted computing and security automation techniques

  2013cites this paper
• A Multi-Layer Moving Target Defense Approach for Protecting Resource-Constrained Distributed Devices

  2013cites this paper
• Threat modeling for security assessment in cyberphysical systems

  2013cites this paper
• Poster : Visualization of user ’ s end-to-end security risks

  2012cites this paper
• A holistic approach for measuring the survivability of SCADA systems

  2012influential citation