Analysis of software vulnerabilities using Exploratory Data Analysis (EDA)

摘要

Software vulnerabilities are very crucial to organizations as it can cause severe revenue loss if exploited. Study of vulnerabilities and understanding their behavior is necessary to maintain software systems. The process of identifying and understanding vulnerabilities is the initial step in creating policies to stop them in the future. Exploratory Data Analysis is a technique to understand the data and identify the attributes and features that are requires. In this paper the authors use EDA to study the software vulnerability data collected from a company. Vulnerabilities are visualized based on CVSS scores, severity, vulnerability status, category and OS. This study is focused on understanding the features in order to prevent vulnerabilities in the future.