Conceptualization of Integrative Use of Vulnerability Databases in the Context of System Management of Information Security
Year: 2025
Type: article
Abstract: The article discusses the conceptual principles of the integrative use of vulnerability databases within the framework of information security system management. In the context of the rapid growth of the number of cyber threats and the expansion of digital attack surfaces for state and corporate structures, the need for systematic, automated and context-oriented use in information security processes is becoming particularly relevant.The research addresses the problem of the lack of coordination between different sources of vulnerabilities, the diversity of data submission formats (for example, CVE, CWE, CVSS), the lack of real-time prioritization mechanisms, as well as the limited integration of vulnerability databases into existing information security management systems in accordance with the requirements of ISO/IEC 27001, NIST CSF and other regulatory documents.The central issue addressed by this research is the lack of coordination between different vulnerability sources, the diversity of data submission formats (e.g., CVE, CWE, CVSS), the absence of real-time prioritization mechanisms, and the limited integration of vulnerability databases into existing information security management systems, despite the requirements of ISO/IEC 27001, NIST CSF, and other regulatory documents.The methodological basis of the study is the logical-structural modeling of the processes of collecting, normalizing, processing, contextualizing and prioritizing vulnerability data in order to integrate them into information security systems.A conceptual model is proposed that includes sources of external vulnerability databases (NVD, CVE, CISA KEV, Microsoft SUG, etc.), aggregation and normalization modules, a contextual analysis block taking into account threats (Threat Intelligence), as well as prioritization mechanisms using CVSS, EPSS metrics, exploit availability, and connection to critical assets. Particular attention is paid to integrating the obtained results into the existing information security infrastructure, including SIEM, SOAR, CMDB, ITSM, and other components.The research results enable effective support of decision-making processes in the field of information security, reduce response time to critical vulnerabilities, and increase the overall level of cyber resilience of organizations. The research results enable effective support of decision-making processes in the field of information security, reduce response time to critical vulnerabilities, and increase the overall level of cyber resilience of organizations. A comparative analysis of current vulnerability databases was carried out according to a number of criteria (availability of CVE identifiers, CVSS support, availability of risk calculators, integration capabilities, etc.), which allows justifying the choice of sources forautomated monitoring and risk assessment.The scientific novelty lies in the formalization of an integrative approach to the use of vulnerability databases in information security system management, the identification of critical requirements for such databases in terms of automation of information security processes, as well as in the proposed logical-structural model that covers the full vulnerability management life cycle - from detection to response. The presented results can be used as a basis for thedevelopment of information and analytical platforms for monitoring cyber risks, building risk calculators and security audit tools.
Institution: Lviv State University of Life Safety
Language: English
Subfield: Information Systems
Field: Computer Science
Domain: Physical Sciences
Open Access status: gold
Estimated APC paid: $16
OpenAlex ID: W4411705285