@inproceedings{e10b82966f124b0f89c14837ccc5257d,
title = "Vulnerability modelling for hybrid IT systems",
abstract = "Common vulnerability scoring system (CVSS) is an industry standard that can assess the vulnerability of nodes in traditional computer systems. The metrics computed by CVSS would determine critical nodes and attack paths. However, traditional IT security models would not fit IoT embedded networks due to the distinct nature and unique characteristics of IoT systems. This paper analyses the application of CVSS for IoT embedded systems and proposes an improved vulnerability scoring system based on CVSS v3 framework. The proposed framework, named CVSS IoT, is applied to a realistic IT supply chain system and the results are compared with the actual vulnerabilities from the national vulnerability database. The comparison result validates the proposed model. CVSS IoT is not only effective, simple and capable of vulnerability evaluation for traditional IT system but also exploits unique characteristics of IoT devices.",
keywords = "CVSS, IoT, vunerability, supply chain, security, Supply chain, Cvss, Vulnerability, Security, Iot",
author = "Attiq Ur-Rehman and Iqbal Gondal and Joarder Kamruzzuman and Alireza Jolfaei",
year = "2019",
doi = "10.1109/ICIT.2019.8755005",
language = "English",
series = "IEEE International Conference on Industrial Technology",
publisher = "Institute of Electrical and Electronics Engineers (IEEE)",
pages = "1186--1191",
booktitle = "Proceedings 2019 IEEE International Conference on Industrial Technology (ICIT)",
address = "United States",
note = "20th IEEE International Conference on Industrial Technology, ICIT 2019 ; Conference date: 13-02-2019 Through 15-02-2019",
}