SecScore: Enhancing the CVSS Threat Metric Group with Empirical Evidences

arXiv:2405.08539v1 Announce Type: new
Abstract: Background: Timely prioritising and remediating vulnerabilities are paramount in the dynamic cybersecurity field, and one of the most widely used vulnerability scoring systems (CVSS) does not address the increasing likelihood of emerging an exploit code. Aims: We present SecScore, an innovative vulnerability severity score that enhances CVSS Threat metric group with statistical models from empirical evidences of real-world exploit codes. Method: SecScore adjusts the traditional CVSS score using an explainable and empirical method that more …

address arxiv code cs.cr cvss cybersecurity cybersecurity field dynamic emerging exploit exploit code metric paramount remediating vulnerabilities score scoring severity systems threat vulnerabilities vulnerability