VuWaDB: A Vulnerability Workaround Database

Atefeh Khazaei, Mohammad Ghasemzadeh and Christoph Meinel
Additional contact information
Atefeh Khazaei: Yazd University, Yazd, Iran
Mohammad Ghasemzadeh: Yazd University, Yazd, Iran
Christoph Meinel: Hasso Plattner Institute, Potsdam, Germany

International Journal of Information Security and Privacy (IJISP), 2018, vol. 12, issue 4, 24-34

Abstract: This paper introduces VuWaDB, which is a database for vulnerability workarounds. When faced with a newly discovered vulnerability, experts tend to use workarounds in order to mitigate the risks until a patch is issued by the vendor. Currently, the available vulnerability databases suffer from the lack of comprehensive workaround solutions. Furthermore, the presented workarounds are only limited to a few vulnerabilities but also poorly recorded in natural language sentences and plain text format. In order to construct VuWaDB, first, the related information was gathered from a number of well-known vulnerability databases and then extracted, analyzed, and labeled. In this regard, VuWaDB organizes the workarounds in six categories: configuration, modify code, redirect, remove, restrict access and, utility tool. Lastly, it was analyzed from the statistical point of view.

Date: 2018
References: Add references at CitEc
Citations:

Downloads: (external link)
http://services.igi-global.com/resolvedoi/resolve. ... 018/IJISP.2018100102 (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:igg:jisp00:v:12:y:2018:i:4:p:24-34

Access Statistics for this article

International Journal of Information Security and Privacy (IJISP) is currently edited by Yassine Maleh

More articles in International Journal of Information Security and Privacy (IJISP) from IGI Global
Bibliographic data for series maintained by Journal Editor ().