Using Natural Language Tool to Assist VPRG Automated Extraction from Textual Vulnerability Description

Author

Le, Ha Thanh ; Loh, Peter Kok Keong

Author_Institution

CSIT-TL@NTU Comput. Security Lab., Nanyang Technol. Univ., Singapore, Singapore

fYear

2011

fDate

22-25 March 2011

Firstpage

586

Lastpage

592

Abstract

This paper presents an application of Natural Language Tool (NLT) to support the VPRG extraction of text based vulnerability description. The NLT is used to analyze the text-based vulnerability descriptions to retrieve vulnerability properties and evaluate their relationships. Then, a graph based VPRG model that describes the vulnerability can be established. Finally, with fine-tuning from domain expertise, the VPRG model can be useful for analyzing and evaluating web-based vulnerabilities. This approach is proposed to support automatic VPRG extraction from several online database resources as well as vulnerability analysis.

Keywords

Internet; graph theory; information retrieval; natural language processing; text analysis; VPRG automated extraction; Web-based vulnerabilities; natural language tool; online database resources; textual vulnerability description; vulnerability properties retrieval; vulnerable property relation graph; Analytical models; Data mining; Databases; Natural language processing; Software; Text processing; VPRG model; Vulnerability description; natural;

fLanguage

English

Publisher

ieee

Conference_Titel

Advanced Information Networking and Applications (WAINA), 2011 IEEE Workshops of International Conference on

Conference_Location

Biopolis

Print_ISBN

978-1-61284-829-7

Electronic_ISBN

978-0-7695-4338-3

Type

conf

DOI

10.1109/WAINA.2011.56

Filename

5763565