README.md

viq-test

R build status Coverage Status

VIQ-Test is an R based toolset for performing analysis on vulnerability prioritization schemes.

Installation

devtools:github("davidski\viq-test")

Usage

library(viq-test)

#Load vulnerability fact table
vulndb_file <- ".\vulnerability_facts.csv"
vulnpryr::load_vulndb(vulndb_file)

#Rescore a vulnerability
vulnpryer(cve_id = "CVE-2014-0013", cvss_base = 5)

Weightings can be overridden by specifying manual values in the function call.

vulnpryer(cve_id = "CVE-2014-0013", cvss_base = 5, msp_factor = 2, network_vector_factor = 3)

Acknowledgements

VIQ-Test is patterned after the TIQ-Test project from the MLSec Project



davidski/viq-test documentation built on Nov. 28, 2020, 11:33 p.m.