Estimate the influential level of vulnerability instance based on hybrid ranking for dynamic network attacking scenarios

Because of the large scale and wide variety of vulnerabilities under network scenarios, administrator using isolated scoring method for the scanned vulnerability can hardly figure out an economic and practical vulnerability patching strategy from numerous choices, due to the lack of consideration on the dynamic status and logic relations among exploits. In this paper, we estimated the influential level of vulnerabilities under the dynamic network scenario through a “hybrid” ranking approach, which is a combination of the low-level rating for vulnerability instances and high-level evaluation for the whole network system. To demonstrate both the applicability and accuracy of our approach, a hybrid ranking engine (HRE) is built. Results show that our approach can help make better operations to harden the network security under network scenarios.