Nowadays, computer network attacks are considered as the most serious issue in everybody’s life. Network hardening is a necessity which requires prioritizing vulnerabilities and finding the most dangerous ones. So, risk assessment should be done as much accurate as possible. The most widely used system for risk assessment is CVSS (Common Vulnerability Scoring System) that has some difficulties which make risk analysis inaccurate. Limited number of risk scores is the most critical issue which causes inefficient vulnerability discrimination. Here one novel approach is proposed which amends the Impact formula of CVSS by the aim of increasing risk estimation accuracy and scores diversity.
 

Keywords: Availability, Confidentiality, CVSS, Exploitability, Impact, Integrity, Network Hardening, Risk, Vulnerability.

Full-Text [PDF 442 kb]   (515 Downloads)