Risk assessment of vulnerabilities exploitation

Registro completo de metadados
MetadadosDescriçãoIdioma
Autor(es): dc.contributorHenriques-Rodrigues, L.-
Autor(es): dc.contributorMenezes, R.-
Autor(es): dc.contributorFaria, S.-
Autor(es): dc.creatorBrilhante, Maria de Fátima-
Autor(es): dc.creatorPestana, Pedro Duarte-
Autor(es): dc.creatorRocha, Maria Luísa-
Autor(es): dc.creatorSequeira, Fernando-
Data de aceite: dc.date.accessioned2026-08-11T12:27:42Z-
Data de disponibilização: dc.date.available2026-08-11T12:27:42Z-
Data de envio: dc.date.issued2026-01-07-
Data de envio: dc.date.issued2026-01-07-
Data de envio: dc.date.issued2023-
Fonte completa do material: dc.identifierhttp://hdl.handle.net/10400.2/20710-
Fonte: dc.identifier.urihttp://educapes.capes.gov.br/handle/10400.2/20710-
Descrição: dc.descriptionUsing the Kolmogorov–Smirnov, Cramér–von Mises and Anderson– Darling tests, and the not so commonly applied Vuong’s test, it is shown that a two components hyperlog-logistic distribution, i.e., a mixture of two geo-max-stable log-logistic distributions, provides a good fit for the time from disclosure to update of vulnerabilities sampled from the CVEdetails.com database. It is also shown that the hyperlog-logistic distribution provides a better fit than a heavy-tailed distribution of maxima, or a log-logistic distribution, or even a heavy-tailed two components hyperexponential distribution. Moreover, ways of incorporating uncertainty and of modeling vulnerabilities lifecycle into the Common Vulnerabilities Scoring System (CVSS), the most widely used score to assess severity of vulnerabilities, are discussed, in order to obtain an improved CVSS calculator and the evolution of a score over time.-
Formato: dc.formatapplication/pdf-
Idioma: dc.languageen-
Publicador: dc.publisherSpringer-
Direitos: dc.rightsN/A-
Palavras-chave: dc.subjectVulnerabilities-
Palavras-chave: dc.subjectVulnerability Life-Cycle-
Palavras-chave: dc.subjectHeavy-Tailed Distributions-
Palavras-chave: dc.subjectHyperlog-logistic Distribution-
Palavras-chave: dc.subjectCVSS Modifier-
Título: dc.titleRisk assessment of vulnerabilities exploitation-
Aparece nas coleções:Repositório Aberto - Universidade Aberta (Portugal)

Não existem arquivos associados a este item.