Distinguished Paper Award at IEEE Security & Privacy Symposium
At 45th IEEE Symposium on Security and Privacy, Julia Wunder, Andreas Kurtz, Christian Eichenmüller, Freya Gassmann and Zinaida Benenson received a Distinguished Paper Award for their work “Shedding Light on CVSS Scoring Inconsistencies: A User-Centric Study on Evaluating Widespread Security Vulnerabilities”.
The paper investigates how CVSS v3.1 users evaluate widespread security vulnerabilities, and discovers serious disagreements on the scores between the 196 evaluators, and also inconsistencies in evaluating of the same vulnerabilities by the same person over time. More information can be found here: Consistency of CVSS v3.1.