Master theses
Vulnerability Prioritization in the Cloud Environment
Author
Ondřej Vokoun
Year
2022
Type
Master thesis
Supervisor
RNDr. Daniel Joščák, Ph.D.
Reviewers
Ing. Jiří Dostál, Ph.D.
Department
Summary
The focus of this thesis is on prioritizing vulnerabilities in the cloud environment, specifically in AWS.
The general vulnerability management process is described, followed by the specifics of the process in the cloud. Risk scoring frameworks and tools available for prioritization in the cloud are discussed. The application called CloneM is designed using the knowledge gained from the previous research. As a result, the developed application allows prioritization of vulnerabilities found on EC2 instances based on the risk factors such as CVSS score, vulnerability exposure and asset importance. The application is evaluated on sample data.