International Vulnerability Database Alliance as an Effective Vulnerability Disclosure Technique

Vulnerability is one of the key factors that cause security incidents and has become a major international threat to network security. Vulnerability is a weakness which allows an attacker to reduce a system's information assurance. Vulnerability disclosure or the disclosure of a vulnerability is the revelation of a vulnerability to the public at large. Previous work like Common Vulnerabilities and Exposures (CVE) offered to manage vulnerability. However, it had significant disadvantages in coverage and regional differences. The mechanisms of vulnerability disclosure in non-English speaking countries are less developed than the ones in English-speaking countries. International Vulnerability Database Alliance (IVDA) is proposed as an alliance model which consists of security organizations from different countries. IVDA provides an open channel for security organizations to share their efforts across the world. The evaluation of IVDA shows that the international alliance is rational and effective in vulnerability disclosure. Keywords-Network Security, Vulnerability, CVE,IVDA