Automatic generation of vulnerabity metrics using machine learning

A method to generate vulnerability metrics, the method comprising:

• receiving a target vulnerability description of a target vulnerability, the target vulnerability description comprising a textual description;
• and
• generating, by a vulnerability metrics generator, one or more target vulnerability vectors of the target vulnerability based on the target vulnerability description, each target vulnerability vector comprising one or more target vulnerability metrics and corresponding one or more metric values,
• wherein the vulnerability metrics generator comprises a vulnerability metrics generation model trained on a training dataset to generate vulnerability vectors, the training dataset having been obtained from one or more training vulnerability data corresponding to one or more training vulnerabilities, each training vulnerability data comprising a training vulnerability description and one or more training vulnerability vectors of the corresponding training vulnerability, the training vulnerability description comprising a textual description, and each training vulnerability vector comprising one or more training vulnerability metrics and corresponding one or more metric values.

A vulnerability metrics generation model trainer, comprising:

• a memory;
• and
• at least one processor coupled to the memory,
• wherein the memory and the at least one processor are configured to:
• obtain a training dataset from one or more training vulnerability data corresponding to one or more training vulnerabilities, each training vulnerability data comprising a training vulnerability description and one or more training vulnerability vectors of the corresponding training vulnerability, the training vulnerability description comprising a textual description, and each training vulnerability vector comprising one or more training vulnerability metrics and corresponding one or more metric values;
• train a vulnerability metrics generation model based on the training dataset;
• and
• provide the vulnerability metrics generation model to a vulnerability metrics generator, the vulnerability metrics generation model enabling the vulnerability metrics generator to generate one or more target vulnerability vectors of a target vulnerability based on a target vulnerability description of the target vulnerability, the target vulnerability description comprising a textual description, and each target vulnerability vector comprising one or more target vulnerability metrics and corresponding one or more metric values.

A vulnerability metrics generator, comprising:

• a memory;
• and
• at least one processor coupled to the memory,
• wherein the memory and the at least one processor are configured to:
• receive a target vulnerability description of a target vulnerability, the target vulnerability description comprising a textual description;
• and
• generate one or more target vulnerability vectors of the target vulnerability based on the target vulnerability description, each target vulnerability vector comprising one or more target vulnerability metrics and corresponding one or more metric values,
• wherein the vulnerability metrics generator comprises a vulnerability metrics generation model trained on a training dataset to generate vulnerability vectors, the training dataset having been obtained from one or more training vulnerability data corresponding to one or more training vulnerabilities, each training vulnerability data comprising a training vulnerability description and one or more training vulnerability vectors of the corresponding training vulnerability, the training vulnerability description comprising a textual description, and each training vulnerability vector comprising one or more training vulnerability metrics and corresponding one or more metric values.