A preliminary analysis of vulnerability scores for attacks in wild

摘要: NVD and Exploit-DB are the de facto standard databases used for research on vulnerabilities, CVSS score is measure risk. On open question whether such scores actually representative of attacks found in wild. To address this we have constructed a database (EKITS) based vulnerabilities currently exploit kits from black market extracted another Symantec's Threat Database (SYM). Our final conclusion that EDB not reliable source information exploits wild, even after controlling exploitability subscore. An high or medium shows only significant sensitivity (i.e. prediction wild) present market. All datasets exhibit low specificity.