Development of Information Access and Management Services for Integrated Vulnerability Database

The paper is devoted to the investigation of open vulnerability databases and methods of their integration for construction of an integrated security information repository. The novelty of the present work lies in the proposed process model of repository construction and filing optimized for the tas...

Full description

Bibliographic Details
Main Authors: Andrey Vladivirovich Fedorchenko, Igor Vitalievich Kotenko, Andrey Alexeevich, Chechulin
Format: Article
Language:English
Published: Joint Stock Company "Experimental Scientific and Production Association SPELS 2015-12-01
Series:Безопасность информационных технологий
Subjects:
Online Access:https://bit.mephi.ru/index.php/bit/article/view/62
Description
Summary:The paper is devoted to the investigation of open vulnerability databases and methods of their integration for construction of an integrated security information repository. The novelty of the present work lies in the proposed process model of repository construction and filing optimized for the task of network security evaluation. As a practical implementation the set of security information management services are presented. The main distinguishing feature of proposed integrated repository is its adaptation for use as a service in the network security evaluation systems and aggregation of security information from multiple open databases in one repository.
ISSN:2074-7128
2074-7136