A knowledge-based inference system for software vulnerabilities

Abstract

Vulnerability detection and diagnosis goes hand-in-hand with an effective remediation process as part of a dependable software security framework. This thesis describes the design of a proposed system model for targeted remediation of vulnerabilities and their variants. This thesis describes a methodology for calibrating the scanners and vulnerabilities, describes effective metrics to detect the confidence of presence or absence, introduces the concept of relationship between vulnerabilities and produces a model to compute the appropriate remediation based on the various remediation metrics and the remediation-mapping model.