Scoring Web-Based Vulnerability Impact Using Property-Based Vulnerability Model

This work extends our proposed property-based vulnerability model (VPRG and VPRM) to score the impact of vulnerabilities by: (1) using the model to distinguish the cause- and consequence- factors that later affect the impact score of vulnerabilities and (2) using the scoring algorithm that considers the relationship of properties evolving in the cause- and consequence-set. We use this scoring framework in determining the impact scores of some web-based and web-related vulnerabilities.