Global ETD Search
Search theses and dissertations gathered from participating repositories worldwide. Every result links back to the library that holds it. No account is needed.
Results
Showing 1 to 11 of 11 for “"CVSS"”.
-
Evaluación de efectividad de las pruebas de penetración internas contra el escalamiento de privilegios de usuario
… de severidad encontrado con el uso del framework CVSS 3.1. Al realizar la replicación de ataques se observó que con las pruebas de penetración internas fue posible encontrar las vulnerabilidades de un sistema, otorgando información importante como los módulos afectados por los ataques, las …
-
SCVI: Bridging Social and Cyber Dimensions for Comprehensive Vulnerability Assessment
… with the Common Vulnerability Scoring System (CVSS) and the Social Vulnerability Index (SVI) highlight SCVI's superior sensitivity to socio-technical risks. Monte Carlo-based weight variability analysis confirms its robustness and effectiveness in identifying high-risk groups. By addressing …
-
Transforming Vulnerabilities into Context-Aware, Visible Risks
… to derive the three constituent Metric Values of CVSS Temporal Scores which are factored into calculating Temporal and Environment Scores -- Exploit Code Maturity, Remediation Level, and Report Confidence --, this study developed heuristics-based rules data-driven by analyzing NVD datasets. Then, …
-
A Quantitative Security Assessment of Modern Cyber Attacks. A Framework for Quantifying Enterprise Security Risk Level Through System's Vulnerability Analysis by Detecting Known and Unknown Threats
… using common vulnerability scoring system (CVSS) and open web application security project (OWASP). Probability theory is applied against known attacks to create the security metrics and, detection and prevention method is suggested for company network against unknown attacks. Our security …
-
Protecció en entorns IoT/IIoT. Anàlisi de vulnerabilitats i hardening d'un centre de control domòtic open-source.
… basada en proves de caixa blanca i l'estàndard CVSS v3.1. Inicialment, s'avalua l'estat original (As-Is) per identificar i mesurar de manera objectiva les vulnerabilitats existents. A partir d'aquesta diagnosi, s'implementa una arquitectura de Defensa en Profunditat (To-Be). Les mesures de …
-
Vývoj kalkulátoru pro hodnocení zranitelností v Javascriptu
… dva systémy hodnocení zranitelností, a to CVSS (Common Vulnerability Scoring System) a OWASP (Open Web Application Security Project) Risk Rating Methodology. Jsou popsány jejich části, metriky a metody samotného výpočtu hodnocení. Následně jsou tyto systémy porovnány a jsou určeny jejich …
-
Cybersecurity vulnerabilities in operational technology
… with the Common Vulnerability Scoring System (CVSS) score span across the whole spectrum. Nonetheless, this conclusion considers only the vulnerability resides within a single component. The attacker might not directly attack a certain vulnerability but execute a series of action that gradually …
-
Penetration testing and vulnerability assessment on the Namibian inter-banking system: Namswitch
… posed a high severity rating according to the CVSS risk rating. An example was the presence of default credentials on some internal systems and the use of low to medium strength ciphers on the external systems. A malicious user can leverage these vulnerabilities to perform attacks such as …
-
Scalable attack modelling in support of security information and event management
… yields the highest aggregated severity score. CVSS severity scores were selected as a means of guiding state-space exploration since they are currently the only publicly available metric which can measure the impact of an exploited vulnerability. Two analysis techniques have been implemented to …
-
The Use of Language Models in End-to-End Spoken Language Processing
… without increasing latency. Experiments on the CVSS speech data showed that SimulS2S-LLM offers a better translation quality-latency trade-off than existing methods that use the same training data, such as improving ASR-BLEU scores by 3 points at similar latency.
-
Quantifying Computer Network Security
<p>Simplifying network security data to the point that it is readily accessible and usable by a wider audience is increasingly becoming important, as networks become larger and security conditions and threats become more dynamic and complex, requiring a broader and more varied security staff …