Functionality Meets Terminology to Address Network Security Vulnerabilities

Abstract

Security vendors and administrators welcomed the CVE effort almost from the start, but the supporting infrastructure around it, enabling a wider variety of end users to deploy CVE compatible technology, has taken time to dovetail with the dictionary. Not until August 2005 did the National Institute of Standards and Technology (NIST) launch its national vulnerability database, which is updated with CVE data in real time. The NVD also includes data-analysis and fine-grained search capabilities