Data Mining in Vulnerability Databases
Markus Schumacher, Christian Haul, Michael Hurler, Alejandro Buchmann · 2000
We will still need quite some time to reach a security standard of IT systems alike the standard already usual in other fields. The reason for this is that IT systems are highly complex and errors are likely to sneak in all phases of their life cycle, e.g. programming or configuration errors. As written in [And93], we may only perceive an improvement of this situation through systematic examination of the vulnerabilities’ characteristics. With this document we present a promising concept based on Vulnerability Databases (VDB). The insights gained through appropriate data mining procedures will help to render both, existing and new systems more secure.