Automated Risk Analysis of a Vulnerability Disclosure Using Active Learning

Autor: Elbaz, Clément, Rilling, Louis, Morin, Christine

Publikováno v: Proceedings of the 28th Computer & Electronics Security Application Rendezvous
Proceedings of the 28th Computer & Electronics Security Application Rendezvous, Nov 2021, Rennes, France
C&ESAR 2021-28th Computer & Electronics Security Application Rendezvous
C&ESAR 2021-28th Computer & Electronics Security Application Rendezvous, Nov 2021, Rennes, France. pp.1-19

International audience; Exhaustively listing the software and hardware components of an information system is non-trivial. This makes it even harder to analyze the risk created by a vulnerability disclosure in the context of a specific information sy

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=dedup_wf_001::c02e61180273d7551f029c49c6fb5fa7
https://hal.inria.fr/hal-03515662/file/2021-cesar_3758460.pdf

Extraction automatisée de mot-clés de vulnérabilités « One-day » à leur divulgation

Autor: Elbaz, Clément, Rilling, Louis, Morin, Christine

Publikováno v: [Research Report] RR-9299, Inria Rennes-Bretagne Atlantique. 2019, pp.1-22

Common Vulnerabilities and Exposures (CVE) databases such as Mitre’s CVE List and NIST’s NVD database identify every disclosed vulnerability affecting any public software. However, during the early hours of a vulnerability disclosure, the metadat

Externí odkaz: https://explore.openaire.eu/search/publication?articleId=dedup_wf_001::4253427e7f009e88337ffd6ef4da3471
https://inria.hal.science/hal-02362062/file/automated_keyword_extration_from_one_day_vulnerabilities_at_disclosure.pdf

Fighting N-day vulnerabilities with automated CVSS vector prediction at disclosure.

Autor: Elbaz, Clément, Rilling, Louis, Morin, Christine

Publikováno v: ACM International Conference Proceeding Series; 8/25/2020, p1-10, 10p

Tento výsledek nelze pro nepřihlášené uživatele zobrazit.
K zobrazení výsledku je třeba se přihlásit.