Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Input this data into NVD database. #43

Closed
Tracked by #29
LiamTownsley2 opened this issue Nov 10, 2023 · 2 comments
Closed
Tracked by #29

Input this data into NVD database. #43

LiamTownsley2 opened this issue Nov 10, 2023 · 2 comments
Labels
nist wontfix This will not be worked on

Comments

@LiamTownsley2
Copy link
Collaborator

No description provided.

@LiamTownsley2
Copy link
Collaborator Author

LiamTownsley2 commented Nov 19, 2023

Best Practices

When properly implemented, the following practices enable users to efficiently download the complete NVD dataset and to accurately maintain this data using very few requests. To further assist developers working with the APIs, the NVD is documenting the best practices for popular workflows.

Initial Data Population

During initial dataset population, users should start by calling the API beginning with a startIndex of 0. Iterative requests should increment the startIndex by the value of resultsPerPage until the response's startIndex has exceeded the value in totalResults.

Maintaining Data

  • After initial data population has occurred, the last modified date parameters provide an efficient way to update a user's local repository and stay within the API rate limits. No more than once every two hours, automated requests should include a range where lastModStartDate equals the time of the last CVE or CPE received and lastModEndDate equals the current time.
  • It is recommended that users "sleep" their scripts for six seconds between requests.
  • It is recommended to use the default resultsPerPage value as this value has been optimized for the API response.
  • Enterprise scale development should enforce these practices through a single requestor to ensure all users are in sync and have the latest CVE, Change History, CPE, and CPE match criteria information.

SOURCE: https://nvd.nist.gov/developers/start-here

@LiamTownsley2
Copy link
Collaborator Author

LiamTownsley2 commented Nov 19, 2023

send 3 api requests for a scan, as the database doesnt seem to do very well fuzzy searching:

  • Manufacturer + Name
  • Name + Version
  • Manufacturer + Name + Version

keep in mind the database splits into multiple pages, will need to go through all pages for all requests and store them and then make a set with all CVE's, so they can be ensured they are unique, then store them in db as a scan & display to user

@LiamTownsley2 LiamTownsley2 closed this as not planned Won't fix, can't repro, duplicate, stale Nov 22, 2023
@LiamTownsley2 LiamTownsley2 added the wontfix This will not be worked on label Nov 22, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
nist wontfix This will not be worked on
Projects
None yet
Development

No branches or pull requests

1 participant