A Deep Dive into the Exploit Prediction Scoring System (EPSS).
The Exploit Prediction Scoring System (EPSS) is a data-driven effort for estimating the likelihood (probability) that a software vulnerability will be exploited in the wild. EPSS’s goal is to assist network defenders to better prioritize vulnerability remediation efforts.
While other industry standards have been useful for capturing innate characteristics of a vulnerability and provide measures of severity, they are limited in their ability to assess threat. EPSS fills that gap because it uses current threat information from CVE and real-world exploit data.
In this webinar, join our panelists of cybersecurity experts including Patrick Garrity (Security Researcher at Nucleus Security), Jay Jacobs (Co-Chair of First EPSS SIG and Chief Data Scientist at Cyentia), Yotam Perkal (Director, Vulnerability Research at Rezilion), and Sam Moore (Senior Cyber Security Engineer at a large Telecommunications organization), as they discuss the benefits of using EPSS as a threat intelligence source for vulnerability prioritization.
Throughout the webinar, our panelists cover:
- An overview of the Exploit Prediction Scoring System (EPSS)
- The benefits of using EPSS
- How to use EPSS
- What vulnerability tools can complement EPSS
By the end of the conversation, attendees will have a clear understanding of how to use EPSS.