Analyzing the Perceived Severity of Cybersecurity Threats Reported on Social Media
Table 9: Model performance against real-world exploited threats identified by Symantec and Exploit-DB. “True CVSS” refers to ranking CVEs based on actual CVSS scores in NVD. This model is only for reference and can not be used in real practice, as we do not know true CVSS scores when forecasting.
['[EMPTY]', 'Top 10 P', 'Top 10 R', 'Top 50 P', 'Top 50 R', 'Top 100 P', 'Top 100 R']
We evaluate the number of exploited threats identified within our top ranked CVEs. We observe that 7 of top 10 threats from our model were exploited in the wild. We also observe that for the actual CVSS v3.0 scores, only 1 out of the top 10 vulnerabilities was exploited.