CVSS Scores Are Dead. Let’s Explore 4 Alternatives


Posted on in Presentations

If a picture is worth a thousand words, then a CVSS score is worth two hundred and fifty. Join this session to explore the limitations of CVSS scores and the benefits of a risk-based approach to vulnerability scoring which factors in availability of exploits, patches, and scale of deployments. The session will wrap-up with pros and cons of the alphabet soup of options: EPSS, SSVC, VPR and more.


Participants
Allan Liska

Speaker

Principal Consultant, Recorded Future

Analytics Intelligence & Response

risk management security intelligence risk & vulnerability assessment threat intelligence risk & vulnerability assessment


Topic

Subtopic


Share With Your Community