文章基本信息

标题：Security Risk Scoring Incorporating Computers' Environment
本地全文：下载
作者：Eli Weintraub
期刊名称：International Journal of Advanced Computer Science and Applications(IJACSA)
印刷版ISSN：2158-107X
电子版ISSN：2156-5570
出版年度：2016
卷号：7
期号：4
DOI：10.14569/IJACSA.2016.070423
出版社：Science and Information Society (SAI)
摘要：A framework of a Continuous Monitoring System (CMS) is presented, having new improved capabilities. The system uses the actual real-time configuration of the system and environment characterized by a Configuration Management Data Base (CMDB) which includes detailed information of organizational database contents, security and privacy specifications. The Common Vulnerability Scoring Systems' (CVSS) algorithm produces risk scores incorporating information from the CMDB. By using the real updated environmental characteristics the system enables achieving accurate scores compared to existing practices. Framework presentation includes systems' design and an illustration of scoring computations.
关键词：thesai; IJACSA; thesai.org; journal; IJACSA papers; CVSS; Security; Risk Management; Configuration Management; CMDB; Continuous Monitoring System; Vulnerability