{"id":"https://openalex.org/W2037314979","doi":"https://doi.org/10.1145/1456362.1456365","title":"Vulnerability scoring for security configuration settings","display_name":"Vulnerability scoring for security configuration settings","publication_year":2008,"publication_date":"2008-10-27","ids":{"openalex":"https://openalex.org/W2037314979","doi":"https://doi.org/10.1145/1456362.1456365","mag":"2037314979"},"language":"en","primary_location":{"id":"doi:10.1145/1456362.1456365","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1456362.1456365","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th ACM workshop on Quality of protection","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5003293104","display_name":"Karen Scarfone","orcid":"https://orcid.org/0000-0001-6334-9486"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Karen Scarfone","raw_affiliation_strings":["NIST, Gaithersburg, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NIST, Gaithersburg, MD, USA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5038083931","display_name":"Peter Mell","orcid":"https://orcid.org/0000-0003-2938-897X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Peter Mell","raw_affiliation_strings":["NIST, Gaithersburg, MD, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NIST, Gaithersburg, MD, USA","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.5803,"has_fulltext":false,"cited_by_count":10,"citation_normalized_percentile":{"value":0.59035477,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"3","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.9969000220298767,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9937000274658203,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9933000206947327,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.8513970971107483},{"id":"https://openalex.org/keywords/vulnerability-assessment","display_name":"Vulnerability assessment","score":0.7474786043167114},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7172448039054871},{"id":"https://openalex.org/keywords/vulnerability-management","display_name":"Vulnerability management","score":0.6176908016204834},{"id":"https://openalex.org/keywords/software-security-assurance","display_name":"Software security assurance","score":0.6013877987861633},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5967329144477844},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.43764394521713257},{"id":"https://openalex.org/keywords/reliability-engineering","display_name":"Reliability engineering","score":0.3275456428527832},{"id":"https://openalex.org/keywords/information-security","display_name":"Information security","score":0.27156347036361694},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.17547637224197388},{"id":"https://openalex.org/keywords/security-service","display_name":"Security service","score":0.16532105207443237},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.07674801349639893},{"id":"https://openalex.org/keywords/medicine","display_name":"Medicine","score":0.07426851987838745}],"concepts":[{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.8513970971107483},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.7474786043167114},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7172448039054871},{"id":"https://openalex.org/C172776598","wikidata":"https://www.wikidata.org/wiki/Q7943570","display_name":"Vulnerability management","level":4,"score":0.6176908016204834},{"id":"https://openalex.org/C62913178","wikidata":"https://www.wikidata.org/wiki/Q7554361","display_name":"Software security assurance","level":4,"score":0.6013877987861633},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5967329144477844},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.43764394521713257},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.3275456428527832},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.27156347036361694},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.17547637224197388},{"id":"https://openalex.org/C29983905","wikidata":"https://www.wikidata.org/wiki/Q7445066","display_name":"Security service","level":3,"score":0.16532105207443237},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.07674801349639893},{"id":"https://openalex.org/C71924100","wikidata":"https://www.wikidata.org/wiki/Q11190","display_name":"Medicine","level":0,"score":0.07426851987838745},{"id":"https://openalex.org/C118552586","wikidata":"https://www.wikidata.org/wiki/Q7867","display_name":"Psychiatry","level":1,"score":0.0},{"id":"https://openalex.org/C27415008","wikidata":"https://www.wikidata.org/wiki/Q7256382","display_name":"Psychological intervention","level":2,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/1456362.1456365","is_oa":false,"landing_page_url":"https://doi.org/10.1145/1456362.1456365","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 4th ACM workshop on Quality of protection","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.5,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":3,"referenced_works":["https://openalex.org/W2147056631","https://openalex.org/W2620244897","https://openalex.org/W6682120243"],"related_works":["https://openalex.org/W2393340519","https://openalex.org/W3118510577","https://openalex.org/W4298219515","https://openalex.org/W2021298062","https://openalex.org/W2185499427","https://openalex.org/W1883246888","https://openalex.org/W2371301679","https://openalex.org/W2527966616","https://openalex.org/W4200316191","https://openalex.org/W2188018701"],"abstract_inverted_index":{"The":[0],"best-known":[1],"vulnerability":[2],"scoring":[3,51],"standard,":[4],"the":[5,15,75],"Common":[6],"Vulnerability":[7],"Scoring":[8],"System":[9],"(CVSS),":[10],"is":[11],"designed":[12],"to":[13,27,73],"quantify":[14],"severity":[16],"of":[17,40],"security-related":[18],"software":[19,55],"flaw":[20],"vulnerabilities.":[21],"This":[22],"paper":[23],"describes":[24],"our":[25],"efforts":[26],"determine":[28],"if":[29],"CVSS":[30],"could":[31],"be":[32],"adapted":[33],"for":[34,61,69],"use":[35],"with":[36],"a":[37],"different":[38],"type":[39],"vulnerability:":[41],"security":[42],"configuration":[43,52,71],"settings.":[44],"We":[45,65],"have":[46,58],"identified":[47],"significant":[48],"differences":[49],"in":[50],"settings":[53,72],"and":[54,57],"flaws":[56],"proposed":[59],"methods":[60],"accommodating":[62],"those":[63],"differences.":[64],"also":[66],"generated":[67],"scores":[68],"187":[70],"evaluate":[74],"new":[76],"specification.":[77]},"counts_by_year":[{"year":2020,"cited_by_count":3},{"year":2018,"cited_by_count":3},{"year":2013,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}