From the course: SecOps on Google Distributed Cloud (GDC) for Tier 3 Analysts by Google

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Common Vulnerability Scoring System (CVSS)

Common Vulnerability Scoring System (CVSS) - Google Cloud Platform Tutorial

From the course: SecOps on Google Distributed Cloud (GDC) for Tier 3 Analysts by Google

Start my 1-month free trial Buy for my team

Common Vulnerability Scoring System (CVSS)

“

- [Instructor] The final threat modeling technique is the Common Vulnerability Scoring System, CVSS. This methodology provides a way to capture the principle characteristics of a vulnerability and produce a numerical score reflecting its severity. This score can then be used to prioritize response and mitigation efforts based on the risk posed by the vulnerability. CVSS is invaluable for a GDC environment due to its ability to standardize the assessment and prioritization of vulnerabilities across distributed systems. This ensures efforts focus on the most critical issues first. How does it work? First, CVSS evaluates the intrinsic qualities of a vulnerability that are constant over time and user environments. These include metrics such as attack vector, attack complexity, privileges required, user interaction, scope and impact, confidentiality, integrity, and availability. Next, CVSS adjusts the base score based on…

Contents