Використання системи cvss для відображення впливу вразливостей на ФПБ

Abstract

The purpose of this work is to propose a model of the relationship between vulnerabilities and security services implemented in the information and telecommunications system. Such a model would allow to evaluate the impact of each of the vulnerable situations on each of the security services implemented in the information and telecommunication systems with a comprehensive information security system. This is model is needed to assess the risks to existing systems and to mitigate the transition to international standards. Alternatively, it is suggested to use an existing Common Vulnerability Scoring System model, which is quite сommon. The works presents the advantages this system and usability for security task. In the work are considered basic principles of system operation. In conclusion, CVSS is a fairly flexible widespread system and suitable for further work.