Cybersecurity: a predictive analytical model for software vulnerability discovery process. Issue 1 (2nd January 2021)

• Record Type: Journal Article
• Authors: Pokhrel, Nawa Raj; Khanal, Netra; Tsokos, Chris P.; Pokhrel, Keshav
• Is Part Of: Journal of cyber security technology. Volume 5:Issue 1(2021)
• Page Start: 41
• Page End: 69
• Publication Date: 2021-01-02
• Subjects: Vulnerability -- trends -- prediction -- operating systems -- vulnerability life cycle -- differential Equation; Computer security -- Periodicals; Data encryption (Computer science) -- Periodicals; 005.805
• DOI: 10.1080/23742917.2020.1816647
• Languages: English
• ISSNs: 2374-2917

Abstract

ABSTRACT: A software vulnerability is defined as a flaw that exists in computer resources or control that can be exploited by one or more threats. Vulnerabilities are discovered throughout the entire life cycle of the software. In this paper, we examine existing vulnerability models on the subject area and propose a new time-based differential equation model. Our proposed model is based on the assumption that vulnerability saturation is a local phenomenon, that possesses an increasing cyclic behaviour within the software vulnerability life cycle. Daily vulnerability data is extracted from the National Vulnerability Database (NVD) to obtain a cumulative quarterly vulnerability data set for three Operating Systems: Mac OS X, Windows 7, and Linux Kernel. When we apply the proposed model to this data, it is discovered that our model performs significantly better than existing models, in terms of fitting and prediction capabilities.