IVDA: International Vulnerability Database Alliance

Vulnerability is one of the important factors that cause security incidents and has become a major international threat to network security. Previous work like Common Vulnerabilities and Exposures (CVE) and vulnerability databases has been offered to manage vulnerability. However, they have significant disadvantages in coverage and regional differences. International Vulnerability Database Alliance (IVDA) is proposed as an alliance model which consists of security organizations from different countries. IVDA provides systematic policies and standards to manage vulnerabilities of software in different languages, and achieves agreement with its members to enhance international cooperation and communication. The evaluation of IVDA shows that the international alliance is rational and effective in vulnerability disclosure.