This project focuses on collecting, categorizing, and analyzing vulnerability data across different industry sectors to create comparative risk profiles. Students will gather data from various sources, apply industry-specific risk analysis methodologies, and develop a structured dataset that helps organizations understand vulnerability prioritization based on their sector's unique characteristics.

Problem to Solve

Organizations struggle to effectively prioritize vulnerabilities based on their specific industry context. Generic vulnerability scoring systems fail to account for industry-specific impacts, causing misaligned security efforts. This project addresses this gap by creating a specialized dataset that maps how vulnerabilities should be prioritized differently across healthcare, financial services, manufacturing, and critical infrastructure sectors.

Project Objectives

1. Develop a comprehensive vulnerability dataset that includes industry-specific risk factors
2. Apply multiple vulnerability prioritization frameworks (CVSS, EPSS, SSVC) to collected data
3. Create comparative risk analysis showing how the same vulnerabilities impact different industries
4. Deliver actionable insights for sector-specific vulnerability prioritization approaches

Expected Outcomes

By the end of this project, students will deliver:

1. A structured vulnerability dataset with multi-framework scoring
2. Industry-specific risk analysis for 4 key sectors
3. Documentation of methodology and findings
4. Recommendations for sector-specific vulnerability prioritization