The Evaluation of Information Security in Organizations, Using the CVSS Scoring System (CROSBI ID 588348)
Prilog sa skupa u zborniku | izvorni znanstveni rad | međunarodna recenzija
Podaci o odgovornosti
Bushati, Jozef ; Kirinic, Valentina ; Barolli, Ezmolda ; Lesha, Virtyt
engleski
The Evaluation of Information Security in Organizations, Using the CVSS Scoring System
Common Vulnerability Scoring System (CVSS) is an industry standard for assessing the severity of computer system security vulnerabilities. Considering the fact that there are a lot of vulnerabilities and aspects that are included, this method attempts to represent a comprehensive summary of these vulnerabilities.Specifically, it is about three terms: Base, Temporal and Environmental. This paper includes only the first element because this one gives the assessments that are constant in the context of time and environment where the surveillance is performed. One case is considered in attempting to give the corresponding scores.Concretely, we treated a vulnerability to the Apache web-server which has to do with the way this servers treats the requests directed to. Regarding this case, we took for granted the fact that the necessary information is collected as well as the problems related to vulnerabilities to the web server are specified. The purpose is to give a methodology which summarizes these problems according CVSS system.
CVSS ; system security vulnerabilities
nije evidentirano
nije evidentirano
nije evidentirano
nije evidentirano
nije evidentirano
nije evidentirano
Podaci o prilogu
31-36.
2012.
objavljeno
Podaci o matičnoj publikaciji
Proceedings of the IBC 2012 - 1st International Internet & Business Conference
Ivković, Miodrag ; Pejić Bach, Mirjana ; Šimićević, Vanja
Zagreb: Udruga za promicanje poslovne informatike – BIT
1848-5278
Podaci o skupu
The 1st International Conference on Internet & Business
predavanje
27.06.2012-28.06.2012
Rovinj, Hrvatska