Development of Information Access and Management Services for Integrated Vulnerability Database

Abstract

The paper is devoted to the investigation of open vulnerability databases and methods of their integration for construction of an integrated security information repository. The novelty of the present work lies in the proposed process model of repository construction and filing optimized for the task of network security evaluation. As a practical implementation the set of security information management services are presented. The main distinguishing feature of proposed integrated repository is its adaptation for use as a service in the network security evaluation systems and aggregation of security information from multiple open databases in one repository.

Keywords

• vulnerability databases
• security evaluation
• security monitoring systems