Beyond Subjectivity: Sharpening CVSS with Asset Context - Clayton Fields, Michael Assraf - ESW #208

<p>Vulnerability prioritization has traditionally relied on CVSS scores and other subjective measurements (e.g. asset tagging) that don't factor in internal context. A new approach integrates asset context and application activity to derive rich, internal data.</p> <p> </p> <p>This segment is sponsored by Vicarius. Visit <a href= "https://securityweekly.com/vicarius">https://securityweekly.com/vicarius</a> to learn more about them!</p> <p> </p> <p>Visit <a href= "https://www.securityweekly.com/esw">https://www.securityweekly.com/esw</a> for all the latest episodes!</p> <p>Show Notes: <a href= "https://securityweekly.com/esw208">https://securityweekly.com/esw208</a></p>