查看文章

On this poster, we publish a first view on a novel tool we call VulMap. VulMap is a political organized map, that color-codes overall severity of information system vulnerabilities to geographical areas. To attain this, we combine publicly available data sets of vulnerabilities, internet-wide port scans and geolocation databases. The most difficult hurdle to overcome is the link between vulnerabilities and internet-accessible systems. Our approach is to leverage structured annotations of the National Vulnerability Database ¹ and analyzing response headers of system scans, thus obtaining a match between those data types. By applying filters, many aspects of the underlying data can be investigated and compared between different regions. This tool, on the one hand, enables decision makers to get a proper overview of the absolute and relative status of information systems security, and on the other, to investigate …