{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,26]],"date-time":"2026-03-26T18:42:53Z","timestamp":1774550573540,"version":"3.50.1"},"reference-count":0,"publisher":"ECMS","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024,6,7]]},"abstract":"<jats:p>In this work we focus on measuring and attributing impacts to vulnerabilities. We do it in a two-fold way. First, we introduce a concept of Vector Changer \u2013 a CVSS-based measure of how successful exploitation of a vulnerability could lead to usage of consecutive vulnerabilities. The consecutive nature being crucial for analysis of multi-stage attacks and creation of attack graphs. Secondly, we present an expert-filled dataset containing CVE-attributed: Technical Impacts, CVSS and Vector Changer. The dataset contains data for 22 CVEs, each filled separately by three experts (66 CVE datapoints total). Each vulnerability has been assessed on four increasing levels of information availability. Finally, we present a lookup table that enables easy attribution of Vector Changers to vulnerabilities. We present initial findings for our dataset and efficiency of our lookup table in respect to the formulated dataset.<\/jats:p>","DOI":"10.7148\/2024-0569","type":"proceedings-article","created":{"date-parts":[[2024,7,24]],"date-time":"2024-07-24T19:49:02Z","timestamp":1721850542000},"page":"569-578","source":"Crossref","is-referenced-by-count":2,"title":["Expressing impact of vulnerabilities: an expert-filled dataset and vector changer framework for modelling multistage attacks, based on cve, cvss and cwe"],"prefix":"10.7148","author":[{"given":"Tomasz","family":"Machalewski","sequence":"first","affiliation":[]},{"given":"Marcin","family":"Szymanek","sequence":"additional","affiliation":[]},{"given":"Adam","family":"Czubak","sequence":"additional","affiliation":[]},{"given":"Tomasz","family":"Turba","sequence":"additional","affiliation":[]}],"member":"4144","published-online":{"date-parts":[[2024,6,7]]},"event":{"name":"38th ECMS International Conference on Modelling and Simulation"},"container-title":["ECMS 2024 Proceedings edited by Daniel Grzonka, Natalia Rylko, Grazyna Suchacka, Vladimir Mityushev"],"original-title":[],"deposited":{"date-parts":[[2024,7,24]],"date-time":"2024-07-24T19:49:14Z","timestamp":1721850554000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.scs-europe.net\/dlib\/2024\/2024-0569.html"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,6,7]]},"references-count":0,"URL":"https:\/\/doi.org\/10.7148\/2024-0569","relation":{},"subject":[],"published":{"date-parts":[[2024,6,7]]}}}