Title: Probably Don’t Rely on EPSS Yet  
Author: Jonathan Spring 2022-06-06
Last Changed by: Jonathan Spring 2022-06-15
Tiny Link: (useful for email) https://vuls.cert.org/confluence/x/AoBqBg
Export As: PDF  
Labels
There are no labels assigned to this page.
Recent Changes
Time Editor  
2022-06-15 10:09 -0400 Jonathan Spring View Changes
2022-06-08 14:23 -0400 Jonathan Spring View Changes
Corrected factual errors
2022-06-06 17:30 -0400 Jonathan Spring  
Outgoing Links
External Links (39)
    https://www.first.org/global/sigs/framework
    https://github.com/j---/SSVC/blob/main/doc/md_src_files/082…
    https://insights.sei.cmu.edu/blog/tags/artificial-intellige…
    https://pure.tudelft.nl/ws/files/94649359/WEIS2021_Measurin…
    https://ieeexplore.ieee.org/abstract/document/7140298
    https://www.fortiguard.com/threat-research/map
    https://resources.sei.cmu.edu/library/asset-view.cfm?asseti…
    https://www.first.org/epss/model
    https://www.sciencedirect.com/science/article/pii/S18745482…
    https://en.wikipedia.org/wiki/Operational_technology
    https://link.springer.com/article/10.1007/s13347-018-0329-z
    https://vuls.cert.org/confluence/display/CVD/3.4.+Deployer
    https://resources.sei.cmu.edu/library/asset-view.cfm?asseti…
    https://kb.cert.org/vuls/
    https://www.cisa.gov/known-exploited-vulnerabilities-catalo…
    https://www.first.org/epss/
    https://resources.sei.cmu.edu/library/asset-view.cfm?asseti…
    https://nvd.nist.gov/
    https://www.first.org/
    https://www.first.org/epss/articles/prob_percentile_bins
    https://resources.sei.cmu.edu/library/asset-view.cfm?asseti…
    https://github.com/CERTCC/SSVC
    https://www.usenix.org/conference/usenixsecurity19/presenta…
    https://cybersecurity.att.com/alien-labs
    https://www.usenix.org/conference/cset20/presentation/house…
    https://academic.oup.com/cybersecurity/article/6/1/tyaa015/…
    https://insights.sei.cmu.edu/blog/domain-blacklist-ecosyste…
    https://www.first.org/epss/faq
    https://resources.sei.cmu.edu/library/asset-view.cfm?asseti…
    https://www.cve.org/
    https://ieeexplore.ieee.org/stamp/stamp.jsp?tp=&arnumber=93…
    https://en.wikipedia.org/wiki/Vulnerability_management
    https://www.first.org/standards/frameworks/csirts/csirt_ser…
    https://www.first.org/global/sigs/
    https://resources.sei.cmu.edu/library/asset-view.cfm?assetI…
    https://www.first.org/epss
    https://resources.sei.cmu.edu/library/asset-view.cfm?asseti…
    https://tylermoore.utulsa.edu/nspw17.pdf
    https://www.first.org/epss/user-guide.html