Common Reverse Engineering Scoring System (CRESS)

Scoring:

Exploitability

RE Exploitability
Attack Exploitability

Impact

Intended aim
Possible aim

IP-Related

Intended aim
Possible aim

On-Device

Intended aim
Possible aim

Results:


Help:

Select your metrics as you like, the string will be updated automatically.

You can copy the string for storage. If you paste a string, it will be applied to the scoring menus. If your string is erroneous, you will receive an error message.

Below you can find multiple graphical representations for above data. Initially, you see the plot for the case study attacks from our paper.

Parallel plot graph in JS:

Exploitability table

{{CRESS_keys_options.EP.name}} ({{CRESS_keys_options.EP.id}}) {{CRESS_keys_options.RR.name}} ({{CRESS_keys_options.RR.id}}) {{CRESS_keys_options.AI.name}} ({{CRESS_keys_options.AI.id}}) {{CRESS_keys_options.AC.name}} ({{CRESS_keys_options.AC.id}}) {{CRESS_keys_options.SI.name}} ({{CRESS_keys_options.SI.id}}) {{CRESS_keys_options.RS.name}} ({{CRESS_keys_options.RS.id}})
{{get_cvss_text("EP")}} {{get_cvss_text("RR")}} {{get_cvss_text("AI")}} {{get_cvss_text("AC")}} {{get_cvss_text("SI")}} {{get_cvss_text("RS")}}

Impact (direct aim) table

{{CRESS_keys_options.IIC.name}} ({{CRESS_keys_options.IIC.id}}) {{CRESS_keys_options.III.name}} ({{CRESS_keys_options.III.id}}) {{CRESS_keys_options.IOC.name}} ({{CRESS_keys_options.IOC.id}}) {{CRESS_keys_options.IOI.name}} ({{CRESS_keys_options.IOI.id}}) {{CRESS_keys_options.IOA.name}} ({{CRESS_keys_options.IOA.id}})
{{get_cvss_text("IIC")}} {{get_cvss_text("III")}} {{get_cvss_text("IOC")}} {{get_cvss_text("IOI")}} {{get_cvss_text("IOA")}}

Impact (possible) table

{{CRESS_keys_options.PIC.name}} ({{CRESS_keys_options.PIC.id}}) {{CRESS_keys_options.PII.name}} ({{CRESS_keys_options.PII.id}}) {{CRESS_keys_options.POC.name}} ({{CRESS_keys_options.POC.id}}) {{CRESS_keys_options.POI.name}} ({{CRESS_keys_options.POI.id}}) {{CRESS_keys_options.POA.name}} ({{CRESS_keys_options.POA.id}})
{{get_cvss_text("PIC")}} {{get_cvss_text("PII")}} {{get_cvss_text("POC")}} {{get_cvss_text("POI")}} {{get_cvss_text("POA")}}

Parallel plot graph in LaTeX:

Sample plot result.
Sample plot result (click to enlarge).