English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

Understanding the landscape of software vulnerabilities is key for developingeffective security solutions. Fortunately, the evaluation of vulnerabilitydatabases that use a framework for communicating vulnerability attributes andtheir severity scores, such as the Common Vulnerability Scoring System (CVSS),can help shed light on the nature of publicly published vulnerabilities. Inthis paper, we characterize the software vulnerability landscape by performinga historical and statistical analysis of CVSS vulnerability metrics over theperiod of 2005 to 2019 through using data from the National VulnerabilityDatabase. We conduct three studies analyzing the following: the distribution ofCVSS scores (both empirical and theoretical), the distribution of CVSS metricvalues and how vulnerability characteristics change over time, and the relativerankings of the most frequent metric value over time. Our resulting analysisshows that the vulnerability threat landscape has been dominated by only a fewvulnerability types and has changed little during the time period of the study.The overwhelming majority of vulnerabilities are exploitable over the network.The complexity to successfully exploit these vulnerabilities is dominantly low;very little authentication to the target victim is necessary for a successfulattack. And most of the flaws require very limited interaction with users.However on the positive side, the damage of these vulnerabilities is mostlyconfined within the security scope of the impacted components. A discussion oflessons that could be learned from this analysis is presented.

A Historical and Statistical Studyof the Software Vulnerability Landscape