论文标题
使用等级聚合和多目标优化的数据中心漏洞的风险优先级的观点
Perspectives on risk prioritization of data center vulnerabilities using rank aggregation and multi-objective optimization
论文作者
论文摘要
如今，数据已成为实体和公司的宝贵资产，并且确保其安全是一个重大挑战。数据中心负责存储软件应用程序提供的数据。然而，每天的脆弱性数量一直在增加。管理这种漏洞对于建立可靠且安全的网络环境至关重要。释放补丁以修复软件中的安全缺陷是处理这些漏洞的常见做法。但是，对于越来越多的漏洞和修复资源的漏洞的组织来说，优先级是至关重要的，通常受到限制。这篇综述旨在介绍对漏洞排名技术的调查，并促进有关多目标优化如何使脆弱性管理风险优先级管理的讨论。审查了风险优先级的最新方法，旨在开发一个有效的模型，以在数据中心排名漏洞。这项工作的主要贡献是指出多目标优化是一种不常见的，但有前途的策略来优先考虑漏洞，实现更好的时间管理和提高安全性。
Nowadays, data has become an invaluable asset to entities and companies, and keeping it secure represents a major challenge. Data centers are responsible for storing data provided by software applications. Nevertheless, the number of vulnerabilities has been increasing every day. Managing such vulnerabilities is essential for building a reliable and secure network environment. Releasing patches to fix security flaws in software is a common practice to handle these vulnerabilities. However, prioritization becomes crucial for organizations with an increasing number of vulnerabilities since time and resources to fix them are usually limited. This review intends to present a survey of vulnerability ranking techniques and promote a discussion on how multi-objective optimization could benefit the management of vulnerabilities risk prioritization. The state-of-the-art approaches for risk prioritization were reviewed, intending to develop an effective model for ranking vulnerabilities in data centers. The main contribution of this work is to point out multi-objective optimization as a not commonly explored but promising strategy to prioritize vulnerabilities, enabling better time management and increasing security.
