National Institute of Standards and Tech

Vulnerability Description Ontology (Vdo) National Institute of Standards and Tech

NISTIR 8138 (Draft) September 2016

This document aims to describe a more effective and efficient methodology for characterizing vulnerabilities found in various forms of software and hardware implementations including but not limited to information technology systems, industrial control systems or medical devices to assist in the vulnerability management process. The primary goal of the described methodology is to enable automated analysis using metrics such as the Common Vulnerability Scoring System (CVSS).

Why buy a book you can download for free? First you gotta find it and make sure it