Vulnerability classification (CVSS) in Cybersecurity - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to identify the base metric group in CVSS.

Cybersecurity

cvss_metrics = ['[1]', 'Temporal', 'Environmental']

Drag options to blanks, or click blank then click option'

AImpact

BSeverity

CBase

DExploitability

Attempts:

3 left

💡 Hint

Common Mistakes

Confusing Base with Temporal or Environmental metrics.

Choosing severity instead of metric groups.

The Base metric group in CVSS represents the intrinsic characteristics of a vulnerability that are constant over time and user environments.

2fill in blank

medium

Complete the code to calculate the CVSS score using the base score formula.

Cybersecurity

cvss_score = round(([1] + 0.1) * 10) / 10

Drag options to blanks, or click blank then click option'

Aexploitability_score

Bimpact_score

Ctemporal_score

Denvironmental_score

Attempts:

3 left

💡 Hint

Common Mistakes

Using temporal or environmental scores in base score calculation.

Mixing exploitability score instead of impact score.

The base score calculation in CVSS primarily uses the impact score, which reflects the effect of a vulnerability on confidentiality, integrity, and availability.

3fill in blank

hard

Fix the error in the CVSS vector string parsing code.

Cybersecurity

vector_parts = cvss_vector.split('[1]')

Drag options to blanks, or click blank then click option'

A;

B:

C,

D|

Attempts:

3 left

💡 Hint

Common Mistakes

Using colon or comma instead of semicolon.

Using pipe character which is not standard.

CVSS vector strings use semicolons ';' to separate metric components.

4fill in blank

hard

Fill both blanks to complete the CVSS severity rating classification.

Cybersecurity

if score >= [1]:
    severity = 'Critical'
elif score >= [2]:
    severity = 'High'

Drag options to blanks, or click blank then click option'

A9.0

B7.0

C5.0

D4.0

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing up thresholds for Critical and High.

Using lower values for Critical severity.

CVSS classifies scores 9.0 and above as Critical, and scores 7.0 and above as High.

5fill in blank

hard

Fill all three blanks to complete the dictionary comprehension for CVSS metrics filtering.

Cybersecurity

filtered_metrics = {k: v for k, v in metrics.items() if v [1] [2] and k != '[3]'}

Drag options to blanks, or click blank then click option'

A>=

B7.0

CBase

D<

Attempts:

3 left

💡 Hint

Common Mistakes

Using wrong comparison operators.

Not excluding the Base metric correctly.

This comprehension filters metrics with values greater or equal to 7.0 and excludes the 'Base' metric key.