21.01.2015 Views

Security Content Automation Protocol (SCAP) - Build Security In

Security Content Automation Protocol (SCAP) - Build Security In

Security Content Automation Protocol (SCAP) - Build Security In

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

Common Vulnerability Scoring<br />

System (CVSS)<br />

• Definition: CVSS is a scoring system that provides an<br />

open framework for determining the impact of<br />

information technology vulnerabilities and a format for<br />

communicating vulnerability characteristics.<br />

• Specification:<br />

http://csrc.nist.gov/publications/nistir/ir7435/NISTIR-<br />

7435.pdf<br />

• <strong>SCAP</strong> CVSS Base Scores: http://nvd.nist.gov

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!