- Title
- Vulnerability modelling for hybrid IT systems
- Creator
- Ur-Rehman, Attiq; Gondal, Iqbal; Kamruzzuman, Joarder; Jolfaei, Alireza
- Date
- 2019
- Type
- Text; Conference proceedings; Conference paper
- Identifier
- http://researchonline.federation.edu.au/vital/access/HandleResolver/1959.17/169803
- Identifier
- vital:14113
- Identifier
-
https://doi.org/10.1109/ICIT.2019.8755005
- Identifier
- ISBN:9781538663769 (ISBN)
- Abstract
- Common vulnerability scoring system (CVSS) is an industry standard that can assess the vulnerability of nodes in traditional computer systems. The metrics computed by CVSS would determine critical nodes and attack paths. However, traditional IT security models would not fit IoT embedded networks due to distinct nature and unique characteristics of IoT systems. This paper analyses the application of CVSS for IoT embedded systems and proposes an improved vulnerability scoring system based on CVSS v3 framework. The proposed framework, named CVSSIoT, is applied to a realistic IT supply chain system and the results are compared with the actual vulnerabilities from the national vulnerability database. The comparison result validates the proposed model. CVSSIoT is not only effective, simple and capable of vulnerability evaluation for traditional IT system, but also exploits unique characteristics of IoT devices.; Proceedings of the IEEE International Conference on Industrial Technology
- Publisher
- Institute of Electrical and Electronics Engineers Inc.
- Relation
- 2019 IEEE International Conference on Industrial Technology, ICIT 2019; Melbourne, Australia; 13th-15th February 2019 Vol. 2019-February, p. 1186-1191
- Rights
- Copyright © 2019 IEEE.
- Rights
- Open Access
- Rights
- This metadata is freely available under a CCO license
- Subject
- Cvss; Iot; Security; Supply chain; Vulnerability
- Full Text
- Reviewed
- Hits: 2330
- Visitors: 2331
- Downloads: 545
| Thumbnail | File | Description | Size | Format | |||
|---|---|---|---|---|---|---|---|
| View Details Download | SOURCE1 | Published version | 1 MB | Adobe Acrobat PDF | View Details Download |