CVSS Scores Are Dead. Let’s Explore 4 Alternatives


Posted on in Presentations

If a picture is worth a thousand words, then a CVSS score is worth two hundred and fifty. Join this session to explore the limitations of CVSS scores and the benefits of a risk-based approach to vulnerability scoring which factors in availability of exploits, patches, and scale of deployments. The session will wrap-up with pros and cons of the alphabet soup of options: EPSS, SSVC, VPR and more.

Participants
Allan Liska

Speaker

Ransomware Sommelier, Recorded Future


Share With Your Community