NotesFAQContact Us
Collection
Advanced
Search Tips
Back to results
ERIC Number: ED516233
Record Type: Non-Journal
Publication Date: 2010
Pages: 113
Abstractor: As Provided
ISBN: ISBN-978-1-1240-1512-5
ISSN: N/A
EISSN: N/A
An Empirical Measure of Computer Security Strength for Vulnerability Remediation
Villegas, Rafael
ProQuest LLC, Ph.D. Dissertation, Indiana State University
Remediating all vulnerabilities on computer systems in a timely and cost effective manner is difficult given that the window of time between the announcement of a new vulnerability and an automated attack has decreased. Hence, organizations need to prioritize the vulnerability remediation process on their computer systems. The goal of this research was to determine and measure vulnerabilities in computer systems to build a model of computer security strength and to determine the set of vulnerabilities that tend to be remotely exploited. Assigning a vulnerability score from the Common Vulnerability Scoring System (CVSS) was utilized to develop the model. After building the security strength model, a regression analysis was conducted on data empirically collected from a honeypot established to analyze which vulnerabilities tend to be targeted based on the security strength of a computer system. By having a standardized method to quantify computer security strength, organizations can make decisions on how to address computer security issues pertinent to their vulnerability remediation processes. [The dissertation citations contained here are published with the permission of ProQuest LLC. Further reproduction is prohibited without permission. Copies of dissertations may be obtained by Telephone (800) 1-800-521-0600. Web page: http://www.proquest.com/en-US/products/dissertations/individuals.shtml.]
ProQuest LLC. 789 East Eisenhower Parkway, P.O. Box 1346, Ann Arbor, MI 48106. Tel: 800-521-0600; Web site: http://www.proquest.com/en-US/products/dissertations/individuals.shtml
Publication Type: Dissertations/Theses - Doctoral Dissertations
Education Level: N/A
Audience: N/A
Language: English
Sponsor: N/A
Authoring Institution: N/A
Grant or Contract Numbers: N/A