AI-Driven Context-Aware Vulnerability Prioritization for Cognitive Radio Networks Using CVSS v4.0 and EPSS
编号:73
访问权限:仅限参会人
更新:2026-11-10 16:38:18 浏览:10次
Online
摘要
Cognitive Radio Networks (CRNs) dynamically sense and opportunistically access underutilized spectrum through software-defined radios (SDRs) and cognitive engines. While this hardware re-configurability improves spectrum efficiency, it expands the system attack surface across multiple protocol layers, introducing threats such as primary-user emulation (PUE) and spectrum-sensing data falsification (SSDF). Standard vulnerability management frameworks (CVSS and EPSS) evaluate flaws in isolation without representing localized radio environment dynamics, resulting in severe alert fatigue for security operations. This paper presents a context-aware vulnerability prioritization architecture that retains the exact compliance semantics of CVSS v4.0 and EPSS while overlaying a proprietary, CRN-specific evidence-fusion layer. The framework maps dynamic radio assets to public vulnerability intelligence, adjusts contextual severity vectors, and estimates a study-defined 30-day exploitation-observation likelihood using a regularized gradient-boosted classifier. Crucially, the engine treats localized parameters—specifically spectrum-sensing exposure and telemetry-derived anomaly encounter frequencies—as contextual predictors rather than intrinsic vulnerability properties. The signals are mathematically synthesized alongside multi-domain stack criticality to compute a Composite Prioritization Score (CPS), which feeds a theoretical capacity-bounded 0/1 Knapsack remediation queue. Evaluation on a contextually constructed 480-instance vulnerability corpus demonstrates an algorithmic discrimination of 0.941 ROC-AUC and 0.903 PR-AUC. Furthermore, the pipeline contracts the immediate remediation workload from 312 instances under severity-only mandates down to 89 instances, yielding an exact 71.5% reduction in initial triage volume while maintaining high ranking stability (Spearman's ρ = 0.892) across varying operational weight simplexes.
关键词
Cognitive Radio Networks,vulnerability prioritization,,CVSS v4.0,EPSS,exploit likelihood,machine learning,,primary-user emulation,spectrum-sensing data falsification,,SDR security
稿件作者
Arun Kumar B R
BMS Institute of Technology & Management
Reshma C R
BMS Institute of Technology & Management
Shreyas A
Sai Vidya Institute of Technology
发表评论