Quantifying security risk level from CVSS estimates of frequency and impact

Published in: Journal of Systems and Software

Volume 83, Issue 9, pp. 1622-1634

DOI: 10.1016/j.jss.2009.08.023