All notable changes to this project will be documented in this file.
- A bug in the standart usage of the formula tool was spotted by Viktor is solved. The traditional usage is removed from the code.
- Web API integrated for severity calculations.
- The
calculate()function was removed during the code refactoring.
- A visual bug was introduced by Kaan and Niccolo. When the
LikelihoodandImpactmetrics were entered as 1, these values appeared as zero in the output section as a result of the calculation. This problem has been fixed.
- Project version was added to calculator's output to prevent any conflicts.
- Half-Dependent field was introduced for
Exploitabilitymetric.
Exploitabilitycoefficient formula was changed.- The distribution graph was replaced.
- Issue classification style was changed. (e.g CRITICAL -> Critical)
- Precision in the final score was truncated to one decimal.
- Formatting feature was added.
- The order of items
ExploitabilityandIssue Complexityin the README.md file has been changed.
- All functions use strict numbers for calculation now.
- A new argument was added to the code for faster input entry.
Two more special conditions were added programmatically to prevent false results:
- The finding can be classified as
Lowwhen the impact metric is 5 and the likelihood metric is 1. - The finding cannot be classified as
Lowwhen the impact metric is 1 and the likelihood metric is 5.
- Severity distribution graph was replaced.
- Taking the square root slightly increased the severity for numbers less than 1. This problem has been fixed.
- The
formula.pyscript can be executed in two different modes:- Calculation mode (no argument)
- Graph mode (
-gor--graphargument)
-
Coefficients were changed.
- Likelihood coefficient was increased to 0.5 from 0.45.
- Impact coefficient was increased to 0.5 from 0.45.
- Issue Complexity coefficient was increased to 0.2 from 0.1.
- Exploitability upper-bound was decreased from 2.0 to 1.5.
-
The formula was refactored for an edge case scenario in case both likelihood and impact metrics are set to 1.
-
Severity thresholds were changed.
- Low:
1.7 < score <= 2.5 - Medium:
2.5 < score <= 3.5 - High:
3.5 < score <= 4.5 - Critical:
4.5 > score
- Low:
-
Number formatting has been changed in order to obtain more precise results during the graphic creation phase.
- The Issue Complexity metric now affects the score negatively.