veda.polac.cz

Resume

Difficulties of Technical Vulnerability Management
Ing. Miroslav Čermák, Police Academy of Czech Republic in Prague, postgraduate student

The article describes what vulnerability is, what the life cycle of vulnerability is, how vulnerability arises, what the relationship between vulnerability, an exploit and a patch is and characterizes 6 possible states. It also presents why it is possible to achieve very different results when assessing the severity of vulnerabilities according to the CVSSv2 and CVSSv3 methodologies, and how the number of vulnerabilities has increased sharply, while the severity of vulnerability itself tends to be evenly distributed in the long run. Last but not least, it is stated that in the context of vulnerability management, it is necessary to approach the number of vulnerabilities listed in the CVE / NVD and VulnDB vulnerability databases with a considerable margin, as these numbers of vulnerabilities are substantially misleading.
Keywords: vulnerability, exploit, life cycle of vulnerability, vulnerability database, technical vulnerability management.

Back

Year	Issue
2024	1
2023	1	2	3	4
2022	1	2	3	4
2021	1	2	3	4
2020	1	2	3	4
2019	1	2	3	4
2018	1	2	3	4
2017	1	2	3	4
2016	1	2	3	4
2015	1	2	3	4
2014	1	2	3	4
2013	1	2	3	4	spec.iss.
2012	1	2	3	4	spec.iss.
2011	1	2	3	4	spec.iss.
2010	1	2	3	4	spec.iss.
2009	1	2	3	4	spec.iss.
2008	1	2	3	4	spec.iss.
2007	1	2	3	4
2006	1	2	3	4
2005	1	2	3	4
2004	1	2
2003	1	2
2002	1	2
2001	1	2
2000	1	2