{"id":476525,"date":"2023-08-09T07:29:55","date_gmt":"2023-08-09T07:29:55","guid":{"rendered":""},"modified":"2023-09-05T11:12:55","modified_gmt":"2023-09-05T11:12:55","slug":"cvss","status":"publish","type":"wiki","link":"https:\/\/oneproxy.pro\/kr\/wiki\/cvss\/","title":{"rendered":"CVSS"},"content":{"rendered":"<p>CVSS(Common Vulnerability Scoring System)\ub294 \ucef4\ud4e8\ud130 \uc2dc\uc2a4\ud15c \ubcf4\uc548 \ucde8\uc57d\uc131\uc758 \uc2ec\uac01\ub3c4\ub97c \ud3c9\uac00\ud558\uae30 \uc704\ud55c \ud45c\uc900\ud654\ub41c \uac1c\ubc29\ud615 \ud504\ub808\uc784\uc6cc\ud06c\uc785\ub2c8\ub2e4. \uc774\ub97c \ud1b5\ud574 IT \uc804\ubb38\uac00\uc640 \uc870\uc9c1\uc740 \uc77c\uad00\ub418\uace0 \uc815\ubcf4\uc5d0 \uc785\uac01\ud55c \ubc29\uc2dd\uc73c\ub85c \ubcf4\uc548 \uc704\ud5d8\uc5d0 \ub300\ud55c \ub300\uc751\uc758 \uc6b0\uc120\uc21c\uc704\ub97c \uc815\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. CVSS\ub294 \ucde8\uc57d\uc131\uc758 \uc8fc\uc694 \ud2b9\uc131\uc744 \ud3ec\ucc29\ud558\uace0 \uae30\ubcf8, \uc2dc\uac04 \ubc0f \ud658\uacbd \uce21\uc815 \uae30\uc900\uc744 \uace0\ub824\ud558\uc5ec \uc2ec\uac01\ub3c4\ub97c \ubc18\uc601\ud558\ub294 \uc218\uce58 \uc810\uc218\ub97c \uc0dd\uc131\ud558\ub294 \ubc29\ubc95\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n<h2>CVSS\uc758 \ucc3d\uc138\uae30<\/h2>\n<p>CVSS\ub294 \ubbf8\uad6d \uad6d\ub9bd \uc778\ud504\ub77c \uc790\ubb38\uc704\uc6d0\ud68c(NIAC)\uc758 \uc774\ub2c8\uc154\ud2f0\ube0c\ub85c \uc2dc\uc791\ub418\uc5c8\uc2b5\ub2c8\ub2e4. 2000\ub144\ub300 \ucd08\ubc18 NIAC\ub294 \uc778\ud504\ub77c\uc5d0 \ub300\ud55c \uc7a0\uc7ac\uc801\uc778 \uc704\ud611\uc744 \ub354 \uc798 \uad00\ub9ac\ud558\uace0 \uc644\ud654\ud558\uae30 \uc704\ud574 IT \ucde8\uc57d\uc131\uc744 \ud3c9\uac00\ud558\ub294 \ud45c\uc900 \uc2dc\uc2a4\ud15c\uc758 \ud544\uc694\uc131\uc744 \uc778\uc2dd\ud588\uc2b5\ub2c8\ub2e4.<\/p>\n<p>CVSS\uc758 \uccab \ubc88\uc9f8 \ubc84\uc804(CVSS v1)\uc740 \uc0ac\uace0 \ub300\uc751 \ubc0f \ubcf4\uc548 \ud300 \ud3ec\ub7fc(FIRST)\uc5d0\uc11c 2005\ub144\uc5d0 \ucd9c\uc2dc\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc774 \ub3c4\uad6c\ub294 \ud1b5\ud569\ub41c \ucde8\uc57d\uc131 \ub4f1\uae09\uc744 \uc81c\uacf5\ud558\uc5ec \ubcf4\uc548 \ub300\uc751 \ud300\uc758 \uc758\uc0ac \uacb0\uc815 \ud504\ub85c\uc138\uc2a4\ub97c \uc9c0\uc6d0\ud558\ub3c4\ub85d \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc774\ud6c4 \uc5c5\ub370\uc774\ud2b8\uc640 \uac1c\uc120\uc744 \uac70\uccd0 2019\ub144 \uc138 \ubc88\uc9f8\uc774\uc790 \ucd5c\uc2e0 \ubc84\uc804(CVSS v3.1)\uc774 \ucd9c\uc2dc\ub410\ub2e4.<\/p>\n<h2>CVSS\uc5d0 \ub300\ud55c \uc2ec\uce35 \uc870\uc0ac<\/h2>\n<p>CVSS\ub294 \uc8fc\ub85c \ucde8\uc57d\uc810\uc758 \uc2ec\uac01\ub3c4\ub97c \uacf5\uc815\ud558\uac8c \uce21\uc815\ud558\ub3c4\ub85d \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uc810\uc218 \uc2dc\uc2a4\ud15c\uc744 \ud1b5\ud574 \uc870\uc9c1\uc740 \uc2dc\uc2a4\ud15c\uc774 \uc9c1\uba74\ud560 \uc218 \uc788\ub294 \uac00\uc7a5 \uc911\uc694\ud55c \ubb38\uc81c\uc5d0 \uc9d1\uc911\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \uc774\ub294 \ub2e8\uc21c\ud788 \ubd84\ub958\ub97c \uc704\ud55c \ub3c4\uad6c\uac00 \uc544\ub2c8\ub77c \uc704\ud611\uc5d0 \ub300\uc751\ud558\uc5ec \uc801\uc808\ud55c \uc870\uce58\ub97c \ucde8\ud558\uae30 \uc704\ud55c \uc9c0\uce68\uc774\uae30\ub3c4 \ud569\ub2c8\ub2e4.<\/p>\n<p>CVSS \uc810\uc218 \ubc94\uc704\ub294 0\uc5d0\uc11c 10\uae4c\uc9c0\uc774\uba70, 0\uc740 \uc704\ud5d8\uc774 \uc5c6\uc74c\uc744 \ub098\ud0c0\ub0b4\uace0 10\uc740 \uc2ec\uac01\ub3c4\uac00 \uac00\uc7a5 \ub192\uc740 \uc218\uc900\uc744 \ub098\ud0c0\ub0c5\ub2c8\ub2e4. \uc774 \uc810\uc218\ub294 \uc138 \uac00\uc9c0 \uce21\uc815\ud56d\ubaa9 \uadf8\ub8f9\uc744 \uae30\ubc18\uc73c\ub85c \uacc4\uc0b0\ub429\ub2c8\ub2e4.<\/p>\n<ul>\n<li>\n<p><strong>\uae30\ubcf8 \uce21\uc815\ud56d\ubaa9<\/strong>: \uc774\ub294 \uacf5\uaca9 \ubca1\ud130, \ubcf5\uc7a1\uc131, \ud544\uc694\ud55c \uad8c\ud55c, \uc0ac\uc6a9\uc790 \uc0c1\ud638 \uc791\uc6a9, \ubc94\uc704, \uae30\ubc00\uc131, \ubb34\uacb0\uc131 \ubc0f \uac00\uc6a9\uc131\uc5d0 \ub300\ud55c \uc601\ud5a5\uacfc \uac19\uc774 \uc2dc\uac04\uacfc \uc0ac\uc6a9\uc790 \ud658\uacbd\uc5d0 \ub530\ub77c \uc77c\uc815\ud558\uac8c \ub098\ud0c0\ub098\ub294 \ucde8\uc57d\uc810\uc758 \ud2b9\uc131\uc785\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\uc2dc\uac04\uc801 \uce21\uc815\ud56d\ubaa9<\/strong>: \uc774\ub7ec\ud55c \uc9c0\ud45c\ub294 \uc2dc\uac04\uc774 \uc9c0\ub0a8\uc5d0 \ub530\ub77c \ubcc0\uacbd\ub418\uba70 \ucde8\uc57d\uc810\uc758 \ud604\uc7ac \uc0c1\ud0dc\ub97c \ucc98\ub9ac\ud569\ub2c8\ub2e4. \uc5ec\uae30\uc5d0\ub294 \uc545\uc6a9 \uac00\ub2a5\uc131, \uad50\uc815 \uc218\uc900 \ubc0f \ubcf4\uace0 \uc2e0\ub8b0\ub3c4\uac00 \ud3ec\ud568\ub429\ub2c8\ub2e4.<\/p>\n<\/li>\n<li>\n<p><strong>\ud658\uacbd \uc9c0\ud45c<\/strong>: \uc774\ub7ec\ud55c \uc9c0\ud45c\ub294 \ubd80\uc218\uc801 \ud53c\ud574 \uac00\ub2a5\uc131, \ub300\uc0c1 \ubd84\ud3ec, \ubcf4\uc548 \uc694\uad6c \uc0ac\ud56d \ub4f1 \uc0ac\uc6a9\uc790 \ud658\uacbd\uc5d0 \ub530\ub77c \ub2e4\ub985\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ul>\n<h2>CVSS \ud504\ub808\uc784\uc6cc\ud06c \ud480\uae30<\/h2>\n<p>CVSS \ud504\ub808\uc784\uc6cc\ud06c\ub294 \uc77c\uad00\ub418\uace0 \uc774\ud574\ud558\uae30 \uc26c\uc6b4 \ud615\uc2dd\uc73c\ub85c \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c \uc815\ubcf4\ub97c \ucea1\ucc98\ud558\uace0 \uc804\ub2ec\ud558\ub3c4\ub85d \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4. \uadf8 \uad6c\uc870\ub294 \ubca1\ud130 \ubb38\uc790\uc5f4\uacfc \ucc44\uc810 \uba54\ucee4\ub2c8\uc998\uc744 \uae30\ubc18\uc73c\ub85c \ud569\ub2c8\ub2e4.<\/p>\n<ul>\n<li>\n<p><strong>\ubca1\ud130 \ubb38\uc790\uc5f4<\/strong>: \uc810\uc218\ub97c \uacc4\uc0b0\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\ub294 \uce21\uc815\ud56d\ubaa9\uc744 \uac04\ub2e8\ud55c \ud14d\uc2a4\ud2b8\ub85c \ud45c\ud604\ud55c \uac83\uc785\ub2c8\ub2e4. \uac01 \uc9c0\ud45c\uc5d0\ub294 \uc7a0\uc7ac\uc801\uc778 \uc601\ud5a5\uc744 \ub098\ud0c0\ub0b4\ub294 \uac12\uc774 \uc9c0\uc815\ub429\ub2c8\ub2e4. \uc608\ub97c \ub4e4\uc5b4 CVSS v3.1\uc5d0\uc11c \ubca1\ud130 \ubb38\uc790\uc5f4\uc740 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4. CVSS:3.1\/AV:N\/AC:L\/PR:N\/UI:N\/S:U\/C:H\/I:H\/A :\uc2dc\uac04.<\/p>\n<\/li>\n<li>\n<p><strong>\ucc44\uc810 \uba54\ucee4\ub2c8\uc998<\/strong>: \ubca1\ud130 \ubb38\uc790\uc5f4\uc758 \uc9c0\ud45c\uc5d0 \uac12\uc744 \ud560\ub2f9\ud55c \ud6c4 \uacf5\uc2dd\uc774 \uc801\uc6a9\ub418\uc5b4 \uae30\ubcf8 \uc810\uc218\ub97c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uadf8\ub7f0 \ub2e4\uc74c \uc2dc\uac04\uc801 \ubc0f \ud658\uacbd\uc801 \uc810\uc218\ub294 \ub2e4\uc591\ud55c \uacf5\uc2dd\uc744 \uc0ac\uc6a9\ud558\uc5ec \uae30\ubcf8 \uc810\uc218\uc5d0\uc11c \ud30c\uc0dd\ub429\ub2c8\ub2e4.<\/p>\n<\/li>\n<\/ul>\n<h2>CVSS\uc758 \uc8fc\uc694 \ud2b9\uc9d5<\/h2>\n<p>CVSS \ud504\ub808\uc784\uc6cc\ud06c\uc758 \uc8fc\uc694 \uae30\ub2a5 \uc911 \uc77c\ubd80\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<ul>\n<li>\uc77c\uad00\ub41c \ucde8\uc57d\uc131 \ud3c9\uac00\ub97c \uc704\ud55c \ud45c\uc900\ud654\ub41c \ucc44\uc810 \uc2dc\uc2a4\ud15c<\/li>\n<li>\ub2e4\uc591\ud55c \uc720\ud615\uc758 \uc2dc\uc2a4\ud15c \ubc0f \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c \uad11\ubc94\uc704\ud55c \uc801\uc6a9 \uac00\ub2a5\uc131<\/li>\n<li>\uc2dc\uac04\uc801, \ud658\uacbd\uc801 \ud2b9\uc815 \uc870\uc815\uc774 \uac00\ub2a5\ud569\ub2c8\ub2e4.<\/li>\n<li>\ub204\uad6c\ub098 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub3c4\ub85d \ud22c\uba85\ud558\uace0 \uac1c\ubc29\uc801\uc785\ub2c8\ub2e4.<\/li>\n<li>\uc0c1\uc138\ud55c \uc9c0\ud45c\ub97c \ud1b5\ud574 \ucde8\uc57d\uc810\uc5d0 \ub300\ud55c \uc2ec\uce35\uc801\uc778 \ud1b5\ucc30\ub825\uc744 \uc5bb\uc744 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/li>\n<li>\ubb38\uc81c \ud574\uacb0 \ub178\ub825\uc758 \uc6b0\uc120\uc21c\uc704\ub97c \uc815\ud558\ub294 \ub370 \ub3c4\uc6c0\uc774 \ub418\ub3c4\ub85d \uc124\uacc4\ub428<\/li>\n<\/ul>\n<h2>CVSS\uc758 \uc720\ud615<\/h2>\n<p>\uc9c0\uae08\uae4c\uc9c0 \uacf5\uac1c\ub41c CVSS \ubc84\uc804\uc740 \uc138 \uac00\uc9c0\uc785\ub2c8\ub2e4.<\/p>\n<ol>\n<li><strong>CVSS v1<\/strong> (2005): IT \ucde8\uc57d\uc131\uc744 \ud3c9\uac00\ud558\uae30 \uc704\ud55c \ud45c\uc900\ud654\ub41c \ubc29\ubc95\uc744 \uc81c\uacf5\ud558\ub294 \ucd08\uae30 \ubc84\uc804\uc785\ub2c8\ub2e4.<\/li>\n<li><strong>CVSS v2<\/strong> (2007): \uccab \ubc88\uc9f8 \ubc84\uc804\uc5d0\uc11c \ub354\uc6b1 \uc815\uc81c\ub41c \uce21\uc815\ud56d\ubaa9\uc73c\ub85c \uac1c\uc120\ub418\uc5c8\uc73c\uba70 \uc2dc\uac04 \ubc0f \ud658\uacbd \uc810\uc218\uac00 \ub3c4\uc785\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/li>\n<li><strong>CVSS v3.1<\/strong> (2019): \uae30\ubcf8, \uc2dc\uac04 \ubc0f \ud658\uacbd \uce21\uc815\ud56d\ubaa9\uc758 \uc815\uc758\uc5d0 \ub300\ud55c \ucd94\uac00 \uac1c\uc120 \ubc0f \uba85\ud655\uc131\uc744 \uc81c\uacf5\ud558\ub294 \ucd5c\uc2e0 \ubc84\uc804\uc785\ub2c8\ub2e4.<\/li>\n<\/ol>\n<h2>CVSS \ud65c\uc6a9: \ubb38\uc81c \ubc0f \ud574\uacb0 \ubc29\ubc95<\/h2>\n<p>CVSS\uc758 \uc8fc\uc694 \uc751\uc6a9 \ubd84\uc57c\ub294 \ucde8\uc57d\uc131 \uad00\ub9ac \ubc0f \uc0ac\uace0 \ub300\uc751 \ud504\ub85c\uc138\uc2a4\uc785\ub2c8\ub2e4. \uc870\uc9c1\uc5d0\uc11c\ub294 CVSS \uc810\uc218\ub97c \uc0ac\uc6a9\ud558\uc5ec \ucde8\uc57d\uc810\uc758 \uc2ec\uac01\ub3c4\uc5d0 \ub530\ub77c \ud574\uacb0 \ub178\ub825\uc758 \uc6b0\uc120\uc21c\uc704\ub97c \uc815\ud569\ub2c8\ub2e4. \uadf8\ub7ec\ub098 \ucc44\uc810 \uc2dc\uc2a4\ud15c\uc740 \uc870\uc9c1\uc758 \ube44\uc988\ub2c8\uc2a4 \uc0c1\ud669\uc744 \uace0\ub824\ud558\uc9c0 \uc54a\uc73c\ubbc0\ub85c \ub2e8\ub3c5\uc73c\ub85c \uc0ac\uc6a9\ud560 \uacbd\uc6b0 \ub9ac\uc18c\uc2a4 \ud560\ub2f9\uc774 \ube44\ud6a8\uc728\uc801\uc73c\ub85c \ubc1c\uc0dd\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ud574\uacb0\ucc45\uc740 \ud2b9\uc815 \ube44\uc988\ub2c8\uc2a4 \uc601\ud5a5\uacfc \ubcf4\uc548 \uc694\uad6c \uc0ac\ud56d\uc744 \uace0\ub824\ud558\ub294 \ub354 \ud070 \uc704\ud5d8 \uad00\ub9ac \ud504\ub808\uc784\uc6cc\ud06c \ub0b4\uc5d0 CVSS \uc810\uc218\ub97c \ud1b5\ud569\ud558\ub294 \uac83\uc785\ub2c8\ub2e4. \uc774\ub7ec\ud55c \ubc29\uc2dd\uc73c\ub85c \uae30\uc5c5\uc740 \ucde8\uc57d\uc131 \uad00\ub9ac\uc5d0 \ub300\ud55c \uade0\ud615 \uc7a1\ud78c \uc811\uadfc \ubc29\uc2dd\uc744 \ub9cc\ub4e4 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>CVSS\ub97c \ub2e4\ub978 \ud45c\uc900\uacfc \ube44\uad50<\/h2>\n<p>IT \ucde8\uc57d\uc131\uc744 \ud3c9\uac00\ud558\uae30 \uc704\ud55c \ub2e4\ub978 \uc2dc\uc2a4\ud15c\uc774 \uc788\uc9c0\ub9cc CVSS\ub294 \ud3ec\uad04\uc801\uc778 \ud2b9\uc131, \uac1c\ubc29\uc131 \ubc0f \uad11\ubc94\uc704\ud55c \ucc44\ud0dd\uc73c\ub85c \uc778\ud574 \ub450\uac01\uc744 \ub098\ud0c0\ub0c5\ub2c8\ub2e4. \uac04\ub7b5\ud55c \ube44\uad50\ub294 \ub2e4\uc74c\uacfc \uac19\uc2b5\ub2c8\ub2e4.<\/p>\n<table>\n<thead>\n<tr>\n<th><\/th>\n<th>CVSS<\/th>\n<th>OWASP \uc704\ud5d8 \ud3c9\uac00 \ubc29\ubc95\ub860<\/th>\n<th>\uacf5\ud3ec<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>\uac1c\ubc29\ud615 \ud45c\uc900<\/td>\n<td>\uc608<\/td>\n<td>\uc544\ub2c8\uc694<\/td>\n<td>\uc544\ub2c8\uc694<\/td>\n<\/tr>\n<tr>\n<td>\uc810\uc218 \ubc94\uc704<\/td>\n<td>0-10<\/td>\n<td>\uc704\ud5d8 \uc218\uc900(\ub0ae\uc74c~\uc911\uc694)<\/td>\n<td>0-10<\/td>\n<\/tr>\n<tr>\n<td>\uc694\uc778<\/td>\n<td>\uae30\ubc00\uc131, \ubb34\uacb0\uc131, \uac00\uc6a9\uc131, \uc545\uc6a9 \uac00\ub2a5\uc131, \uad50\uc815, \ubcf4\uace0 \uc2e0\ub8b0\ub3c4<\/td>\n<td>\uc704\ud611\uc6d0, \ucde8\uc57d\uc810, \uc601\ud5a5<\/td>\n<td>\uc190\uc0c1, \uc7ac\ud604\uc131, \uc545\uc6a9 \uac00\ub2a5\uc131, \uc601\ud5a5\uc744 \ubc1b\ub294 \uc0ac\uc6a9\uc790, \uac80\uc0c9 \uac00\ub2a5\uc131<\/td>\n<\/tr>\n<tr>\n<td>\uc2dc\uac04\uc801, \ud658\uacbd\uc801 \uc9c0\ud45c\uc758 \uc0ac\uc6a9<\/td>\n<td>\uc608<\/td>\n<td>\uc544\ub2c8\uc694<\/td>\n<td>\uc544\ub2c8\uc694<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>CVSS\uc758 \ubbf8\ub798<\/h2>\n<p>\uc0ac\uc774\ubc84 \uc704\ud611\uc774 \uacc4\uc18d \uc9c4\ud654\ud568\uc5d0 \ub530\ub77c CVSS\ub3c4 \uc9c4\ud654\ud560 \uac83\uc785\ub2c8\ub2e4. \ucee4\ubba4\ub2c8\ud2f0\uc5d0\uc11c\ub294 \ucde8\uc57d\uc810\uc758 \uc2ec\uac01\ub3c4\ub97c \ub354 \uc798 \ubc18\uc601\ud558\uae30 \uc704\ud574 \uc810\uc218 \uc2dc\uc2a4\ud15c\uc744 \uac1c\uc120\ud558\uae30 \uc704\ud574 \uc801\uadf9\uc801\uc73c\ub85c \ub178\ub825\ud558\uace0 \uc788\uc2b5\ub2c8\ub2e4. AI\uc640 \uae30\uacc4 \ud559\uc2b5 \uae30\uc220\uc744 \ud1b5\ud569\ud558\uc5ec CVSS \ucc44\uc810 \ud504\ub85c\uc138\uc2a4\ub97c \uc790\ub3d9\ud654\ud558\uace0 \ub354\uc6b1 \uc815\ud655\ud558\uac8c \ub9cc\ub4e4 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ub610\ud55c CVSS\uc758 \ud5a5\ud6c4 \ubc84\uc804\uc5d0\ub294 IoT \uc7a5\uce58, \uc0b0\uc5c5 \uc81c\uc5b4 \uc2dc\uc2a4\ud15c \ub4f1\uc744 \ud3ec\ud568\ud558\uc5ec \ub04a\uc784\uc5c6\uc774 \ubcc0\ud654\ud558\ub294 \uc0ac\uc774\ubc84 \uc704\ud611 \ud658\uacbd\uc744 \uc218\uc6a9\ud558\uae30 \uc704\ud574 \ubcf4\ub2e4 \ub2e4\uc591\ud55c \uce21\uc815\ud56d\ubaa9\uc774 \ud1b5\ud569\ub420 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\ud504\ub85d\uc2dc \uc11c\ubc84 \ubc0f CVSS<\/h2>\n<p>OneProxy\uc5d0\uc11c \uc81c\uacf5\ud558\ub294 \uac83\uacfc \uac19\uc740 \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \ucde8\uc57d\uc810\uc744 \uad00\ub9ac\ud558\uace0 CVSS \uc810\uc218\ub97c \ud65c\uc6a9\ud558\ub294 \ub370 \uc911\uc694\ud55c \uc5ed\ud560\uc744 \ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud074\ub77c\uc774\uc5b8\ud2b8\uc758 \uc694\uccad\uc5d0 \ub300\ud55c \uc911\uac1c\uc790 \uc5ed\ud560\uc744 \ud568\uc73c\ub85c\uc368 \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \uc545\uc131 \ud2b8\ub798\ud53d\uc744 \ud544\ud130\ub9c1\ud558\uc5ec \uacf5\uaca9 \ud45c\uba74\uacfc \uc7a0\uc7ac\uc801\uc778 \ucde8\uc57d\uc810\uc744 \uc904\uc77c \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<p>\ub610\ud55c \uac15\ub825\ud55c \ucde8\uc57d\uc131 \uad00\ub9ac \ud504\ub85c\uc138\uc2a4(CVSS \ud3ec\ud568)\ub97c \uac16\ucd98 \ud504\ub85d\uc2dc \uc11c\ubc84\ub97c \uc0ac\uc6a9\ud558\uba74 \ud5a5\uc0c1\ub41c \ubcf4\ud638 \uae30\ub2a5\uc744 \uc81c\uacf5\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4. \ud504\ub85d\uc2dc \uc11c\ubc84\ub294 \ud2b8\ub798\ud53d\uc744 \uae30\ub85d\ud558\ubbc0\ub85c \ubcf4\uc548 \uac10\uc0ac\ub97c \uc704\ud55c \uadc0\uc911\ud55c \ub370\uc774\ud130\ub97c \uc81c\uacf5\ud558\uace0 \uc7a0\uc7ac\uc801\uc778 \ucde8\uc57d\uc810\uc744 \uc2dd\ubcc4\ud558\ub294 \ub370 \ub3c4\uc6c0\uc744 \uc904 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>\n<h2>\uad00\ub828\ub41c \ub9c1\ud06c\ub4e4<\/h2>\n<p>CVSS\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 \ub2e4\uc74c \ub9ac\uc18c\uc2a4\ub97c \ucc38\uc870\ud558\uc138\uc694.<\/p>\n<ul>\n<li><a href=\"https:\/\/www.first.org\/cvss\/user-guide\" target=\"_new\" rel=\"noopener nofollow\">\uccab \ubc88\uc9f8 CVSS \uac00\uc774\ub4dc<\/a><\/li>\n<li><a href=\"https:\/\/nvd.nist.gov\/vuln-metrics\/cvss\/v3.1\/specification-document\" target=\"_new\" rel=\"noopener nofollow\">NVD CVSS v3.1 \uc0ac\uc591<\/a><\/li>\n<li><a href=\"https:\/\/www.nist.gov\/cyberframework\/online-learning\/cvss\" target=\"_new\" rel=\"noopener nofollow\">NIST\uc758 CVSS \uac1c\uc694<\/a><\/li>\n<li><a href=\"https:\/\/nvd.nist.gov\/vuln-metrics\/cvss\/v3-calculator\" target=\"_new\" rel=\"noopener nofollow\">CVSS \uacc4\uc0b0\uae30<\/a><\/li>\n<\/ul>\n<p>CVSS\ub97c \uc774\ud574\ud558\uace0 \uc801\uc6a9\ud558\ub294 \uac83\uc740 \ucde8\uc57d\uc131 \uad00\ub9ac \ubc0f \uc804\ubc18\uc801\uc778 \uc0ac\uc774\ubc84 \ubcf4\uc548 \ud0dc\uc138\ub97c \uac1c\uc120\ud558\ub824\ub294 \ubaa8\ub4e0 \uc870\uc9c1\uc5d0 \ud544\uc218\uc801\uc785\ub2c8\ub2e4. CVSS\ub97c \uc704\ud5d8 \ud3c9\uac00 \ud504\ub808\uc784\uc6cc\ud06c\uc5d0 \ud1b5\ud569\ud568\uc73c\ub85c\uc368 \uae30\uc5c5\uc740 \ucde8\uc57d\uc810\uc758 \uc6b0\uc120\uc21c\uc704\ub97c \uc9c0\uc815\ud558\uace0 \ud6a8\uacfc\uc801\uc73c\ub85c \ub300\uc751\ud560 \uc218 \uc788\uc2b5\ub2c8\ub2e4.<\/p>","protected":false},"featured_media":476526,"menu_order":0,"template":"","meta":{"_acf_changed":false,"content-type":"","inline_featured_image":false,"footnotes":""},"class_list":["post-476525","wiki","type-wiki","status-publish","has-post-thumbnail","hentry"],"acf":{"faq_title":"Frequently Asked Questions about <mark>Understanding CVSS: The Common Vulnerability Scoring System<\/mark>","faq_items":[{"question":"What is the Common Vulnerability Scoring System (CVSS)?","answer":"<p>CVSS is a standardized, open framework for assessing the severity of computer system security vulnerabilities. It provides a way to capture the main characteristics of a vulnerability and produce a numerical score reflecting its severity. The scores range from 0 to 10, with 0 representing no risk and 10 indicating the highest level of severity.<\/p>"},{"question":"Who developed CVSS and when was it first introduced?","answer":"<p>CVSS was initially developed by the Forum of Incident Response and Security Teams (FIRST) under the recommendation of the National Infrastructure Advisory Council (NIAC) in the United States. The first version of CVSS (CVSS v1) was introduced in 2005.<\/p>"},{"question":"What are the three metric groups used in CVSS?","answer":"<p>The three metric groups used in CVSS are Base Metrics, Temporal Metrics, and Environmental Metrics. Base Metrics are constant characteristics of a vulnerability, Temporal Metrics change over time and deal with the current state of the vulnerability, and Environmental Metrics are specific to a user\u2019s environment.<\/p>"},{"question":"What does a CVSS score range signify?","answer":"<p>CVSS scores range from 0 to 10. A score of 0 represents no risk, while a score of 10 indicates the highest level of severity or risk. The scores help organizations prioritize their responses and remediation efforts towards security vulnerabilities.<\/p>"},{"question":"How many versions of CVSS exist?","answer":"<p>There have been three versions of CVSS published so far: CVSS v1 in 2005, CVSS v2 in 2007, and CVSS v3.1 in 2019. Each version has brought refinements and improvements to the system.<\/p>"},{"question":"How does CVSS compare to other vulnerability assessment standards?","answer":"<p>While there are other systems for assessing IT vulnerabilities, CVSS stands out due to its comprehensive nature, openness, and widespread adoption. It uses a numerical scoring system and considers various factors such as confidentiality, integrity, availability, exploitability, remediation, and report confidence. It also uses temporal and environmental metrics, unlike many other standards.<\/p>"},{"question":"How can proxy servers be used with CVSS?","answer":"<p>Proxy servers, like those provided by OneProxy, can play a significant role in managing vulnerabilities and utilizing CVSS scores. They can filter out malicious traffic, reducing the attack surface and potential vulnerabilities. Additionally, they can provide valuable data for security audits and assist in identifying potential vulnerabilities when used as part of a robust vulnerability management process.<\/p>"},{"question":"What is the future perspective of CVSS?","answer":"<p>The future of CVSS includes refining the scoring system to better reflect the severity of vulnerabilities. It might incorporate AI and machine learning technologies to automate the CVSS scoring process. Furthermore, future versions may include more diverse metrics to accommodate new types of cyber threats, such as those involving IoT devices and industrial control systems.<\/p>"}]},"_links":{"self":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/476525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki"}],"about":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/types\/wiki"}],"version-history":[{"count":0,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/wiki\/476525\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media\/476526"}],"wp:attachment":[{"href":"https:\/\/oneproxy.pro\/kr\/wp-json\/wp\/v2\/media?parent=476525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}