You can not select more than 25 topics Topics must start with a chinese character,a letter or number, can include dashes ('-') and can be up to 35 characters long.

CVSS_Calculator.py 1.1 kB

1234567891011121314151617181920212223242526272829303132333435363738
  1. import math
  2. from cvss import CVSS2
  3. from cvss import CVSS3
  4. from cvss import CVSS4
  5. import re
  6. import pandas as pd
  7. import numpy as np
  8. data1 = pd.DataFrame(pd.read_json(r"E:\pythonProject_open\data\SIR_dataset_processed.json"))
  9. vecStr = data1["vectorString"]
  10. impactScores = data1["impactScore"]
  11. exploitabilityScores = data1["exploitabilityScore"]
  12. print("----")
  13. for i, j, k in zip(vecStr, impactScores, exploitabilityScores) :
  14. cvssVer = re.findall(':(.*?)/', i)
  15. impactScore = float(j)
  16. exploitabilityScore = float(k)
  17. if float(cvssVer[0]) == 2:
  18. cvss = CVSS2(i)
  19. elif 2 <= float(cvssVer[0]) < 4:
  20. cvss = CVSS3(i)
  21. else:
  22. cvss = CVSS4(i)
  23. cvss_baseScore = cvss.base_score
  24. print(cvss_baseScore)
  25. if impactScore <= 0:
  26. cvss_baseScore = 0
  27. elif 0 < impactScore + exploitabilityScore < 10:
  28. cvss_baseScore = math.ceil((impactScore + exploitabilityScore) * 10) / 10
  29. else:
  30. cvss_baseScore = 10
  31. print(f"baseScore:{cvss_baseScore}, impactScore:{impactScore}, exploitabilityScore:{exploitabilityScore}")

在信息安全领域,漏洞评估和管理是关键任务之一。本作品探讨了如何利用预训练文本大模型来评估和研判漏洞的严重等级,具体基于通用漏洞评分系统。传统漏洞评分方法依赖于手动分析和专家评审。而基于自然语言处理文本大模型通过其深度学习能力,可以自动化地处理和分析大量的安全相关文本数据,从而提高漏洞评估的效率和准确性。结合词干提取、词性还原能够更好地发挥自然语言处理文本大模型的预测能力与准确度。