The National Institute of Standards and Technology (NIST) is proposing a novel method to assess which software vulnerabilities are most likely being exploited, known as the “Likely Exploited Vulnerabilities” (LEV) metric.<\/p>\n
This initiative appeals to the cybersecurity community to help refine and authorize the approach. <\/p>\n
Across the cybersecurity landscape, thousands of vulnerabilities are reported annually.<\/p>\n
With such a vast number, it becomes challenging for organizations to understand which vulnerabilities pose the most significant threat and are likely being exploited in the real world.<\/p>\n
Generally, two tools are used to gauge this: The Common Vulnerability Scoring System (CVSS) to rate the severity of software vulnerabilities, and the Exploitability Index, to forecast the likelihood of them being utilized in an attack.<\/p>\n
The proposed LEV metric combines and enhances these existing tools.<\/p>\n
With an aim to counter real-world threat scenarios, the LEV evaluates potential for exploitations based on the abundance of software, its usage context, and adversary behavior.<\/p>\n
It plans to provide a much-needed indication of an actual threat, rather than a theoretical one. <\/p>\n
For instance, an e-commerce platform might use LEV to gauge if a new threat to its data encryption algorithm is being exploited in real-world attacks.<\/p>\n
Through examining characteristics like whether the weakness is network accessible, if user interaction is required, and the ease of exploitability, LEV provides a facet to perceive the actual risk.<\/p>\n
NIST calls upon the cybersecurity community to assist in validating and improving LEV.<\/p>\n
The principle behind this collective approach is to ensure that the metric is adaptable across a variety of organizational contexts and factors in the ever-evolving threat landscape.<\/p>\n
The LEV method promotes a proactive approach in cybersecurity procedures.<\/p>\n
Knowing which vulnerabilities are likely being exploited can guide organizations to prioritize patching and other security measures.<\/p>\n
This metric allows for more informed and effective vulnerability management, leading to robust security infrastructure.<\/p>\n
The proposed LEV metric presents a more targeted way for organizations to respond to software vulnerabilities.<\/p>\n
However, its effectiveness still depends on the collaborative efforts in refining it to the changing threat landscape.<\/p>\n
NIST Proposes New Metric to Gauge Exploited Vulnerabilities The National Institute of Standards and Technology<\/p>\n","protected":false},"author":1,"featured_media":3436,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"pmpro_default_level":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[2,5],"tags":[],"class_list":["post-3295","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","category-news","pmpro-has-access"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3295","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/comments?post=3295"}],"version-history":[{"count":1,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3295\/revisions"}],"predecessor-version":[{"id":3437,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/posts\/3295\/revisions\/3437"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media\/3436"}],"wp:attachment":[{"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/media?parent=3295"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/categories?post=3295"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/aegislens.com\/home\/wp-json\/wp\/v2\/tags?post=3295"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}