2026· International Joint Conference on Rough Sets· pp. 47-59· 1 citation· 32 references
Computer Science
TL;DR
A conceptual model and methodological framework are proposed for embedding data from vulnerability databases into ISMS processes in alignment with ISO/IEC 27001/27002 and NIST recommendations, and provides methodological and architectural foundations for implementing integrated vulnerability management and enhancing cyber resilience in critical infrastructure environments.
The paper addresses the problem of developing a Decision Support System (DSS) for vulnerability management based on the integration and analytical processing of data from heterogeneous cyber threat intelligence sources, and develops a risk-oriented assessment model that enables context-aware differentiation of vulnerab...
N. Maslova, V. Yashchuk, Olena Liubymenko et al.· International Workshop on Co...· 0 citations
The proposed maturity model comprising Fragmented, Instrumented, Correlated, Automated, Automated, and Adaptive stages provides organizations with a practical roadmap for assessing current capabilities and systematically advancing toward intelligent, self-optimizing security operations.
Lakshmi Kiran Meesala· International Journal of Art...· 0 citations
The methodology addresses log correlation, alert triage, incident classification and cross-functional escalation protocols and produces measurable improvements in mean time to detect (MTTD) and mean time to respond (MTTR) while reducing alert fatigue and redundant infrastructure costs.
Oladele Adekunle Awonusi· Computer Science & IT Re...· 0 citations
The implementation of DevSecOps has emerged as an essential strategy for incorporating security from the early stages of software development. Its adoption allows for reducing vulnerabilities, streamlining threat detection, and complying with security regulations. Using a Systematic Literature Review, the study retriev...
Patricia Martínez-Moreno, J. A. Vergara-Camacho, Víctor Adrián Lueváno-Mondragon et al.· International Journal of Com...· 0 citations
The findings indicate that while the OWASP Top Ten serves as a strategic reference, the WSTG is superior as a primary technical auditing framework, which enhances audit consistency, precision, and efficiency in evaluating modern web environments.
The authors propose a comprehensive methodology based on the mathematical formalization of the integration of these three frameworks, including the insufficient specification of the FSTEC methodology, the lack of prioritization mechanisms in the MITRE ATT&CK knowledge base, and the subjectivity of the quantitative asse...
E. Balenko, M. Mitrofanov, N. N. Kramskoy et al.· SOFT MEASUREMENTS AND COMPUT...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
