Logo
 

INDUSTRIAL VULNERABILITY SCORING SYSTEM (IVSS)

S4x19 Conference Presentation Video
Formulas
    BASE PARAMETERS    
      Report Confidence
   
      Consequence 
   
      Remediation Level
   
      BASE SEVERITY SCORE      
       Exploit Difficulty/Incident Complexity
   
      Exploit Maturity
   
      Privilege Level Required
   
      User Interaction Required
   
      BASE EXPLOITABILITY SCORE    
      Threat Vector
   
      ACCESSIBILITY     
      TOTAL BASE SCORE    
    LOCAL ICS ENVIRONMENT MODIFIERS      
      Local Threat Vector
   
      # Of Communication Paths/Access Vectors
   
    ACCESSIBILITY    
      Process Visibility Consequence
   
      Process Monitoring Consequence
   
      Process Control Consequence
   
      Cascading Consequences
   
    CONSEQUENCES    
      Collateral Damage Potential
   
      System Production Impact
   
      System Reliability Impact
   
      System Safety Impact
   
    IMPACT    
    ADJUSTED SCORES    
      ADJUSTED ACCESSIBILITY    
      ADJUSTED CRITICALITY    
      FINAL SCORE    

 

 

Copyright © 2011-2021, Clint Bodungen