Vulnerability Exploitation Probability Metric Proposed by NIST, CISA Researchers

Vulnerability Exploitation Probability Metric Proposed by NIST, CISA Researchers

CISA and NIST researchers are proposing a vulnerability exploitation probability metric which will help to identify the likelihood that a vulnerability has been exploited in the wild. The metric would be called Likely Exploited Vulnerabilities, or LEV, and hopes to bridge the gap between the thousands of vulnerabilities discovered each year and the small percentage […] The post Vulnerability Exploitation Probability Metric Proposed by NIST, CISA…

Researchers Measure Likelihood Of Vulnerability Exploit

Researchers from the U.S. National Institute of Standards and Technology (NIST) and the Cybersecurity and Infrastructure Security Agency (CISA) have developed a new security metric to determine the likelihood that a vulnerability has been exploited. In a paper published this week, Peter Mell, formerly of NIST, and CISA’s Jonathan Spring outlined their vulnerability exploit metric that augments the work of the Exploit Prediction Scoring System (E…