A Method for Multi-dimension Evaluation on Vulnerability Based on Program Dependence Graph

This Paper summarizes literature domestic and abroad about the vulnerability evaluation and analyzes the shortcomings of previous evaluation approaches. A novel method based on program dependence graph is presented to implement multi-dimension evaluation on vulnerability. Compared with the previous evaluation models, the new method can access the influence scope and patch fixed situation, which makes the evaluation results complete and accurate proved by the experiment successfully. Finally, we make a conclusion and propose the future research directions in this field.