A Version-Based Algorithm for Quality Enhancement of Automatically Generated Vulnerability Inventories

Self-protecting systems heavily depend on the quality of information in input in the adaptation loop. Among the others, device and vulnerability inventories play a fundamental role in such systems, and improving their quality is paramount. This paper proposes a new version-based algorithm to filter out false positives from automatically generated inventories by minimizing the interactions with security experts.