engleski

The Evaluation of Information Security in Organizations, Using the CVSS Scoring System

Common Vulnerability Scoring System (CVSS) is an industry standard for assessing the severity of computer system security vulnerabilities. Considering the fact that there are a lot of vulnerabilities and aspects that are included, this method attempts to represent a comprehensive summary of these vulnerabilities.Specifically, it is about three terms: Base, Temporal and Environmental. This paper includes only the first element because this one gives the assessments that are constant in the context of time and environment where the surveillance is performed. One case is considered in attempting to give the corresponding scores.Concretely, we treated a vulnerability to the Apache web-server which has to do with the way this servers treats the requests directed to. Regarding this case, we took for granted the fact that the necessary information is collected as well as the problems related to vulnerabilities to the web server are specified. The purpose is to give a methodology which summarizes these problems according CVSS system.

CVSS ; system security vulnerabilities

nije evidentirano