Handling and reporting security advisories: A scorecard approach

A scorecard approach that provides a practical guide to publish, read, evaluate, and handle security advisories is presented. A vulnarability scorecard provides perspective guidelines based on goal-question-metric approach to users and help them to assess the impact of vulnerability disclosures. It is designed to let users record useful information and help security response centres to publish advisories. The scorecard provides a practical solution to the problem of defining a series of metrics, and help an interested party to determine the risks being faced by a specific system in evaluating the scorecard for a given security advisories.