Using Jupyter Notebooks to Explore Public CVE Data
summary
Provides ready-to-run Jupyter notebooks and a GitHub repo that pull NVD via the NVD 2.0 API and a 1.3 GB consolidated JSONL hosted at nvd.handsonhacking.org, then parse CVE list v5 into Pandas dataframes for analysis and Matplotlib visualizations. Notebooks extract ~15 useful fields, surface data-quality gaps (missing publish dates, tiny descriptions), show ~7,700 CVEs in the demo dataset, and run on MyBinder—live demo sometimes fails but notebooks run locally.
AI-written summary · about
chapters (15)
- 0:00Introduction
- 1:28Analyze CVE data openly
- 6:08Workshop goals and data
- 8:59Technology stack
- 11:50Set up Jupyter environment
- 13:19Download CVE data
- 17:46Explore CVE schema
- 22:02Build CVE data frame
- 23:51Assess CVE data quality
- 25:16Analyze NVD program data
- 27:15Career in vulnerability management
- 32:33Daily CVE visualizations
- 35:49Demo failures and Q&A
- 36:53CPE data and formats
- 39:00CVE data quality and improvements
related talks
40mOpen Source CVE Monitoring and Management: Cutting Through the Vulnerability Storm
33mWhere is my Code Vulnerable: Matching CVEs and Source Code
51mPanel Discussion: It is a Tale as Old as Time…. a CNA, the NVD, and a CVE Consumer Walk Into a ...
30mThe Growing Crisis in CVE Data Quality
41mNIST’s National Vulnerability Database Update and the Vulnerability Enrichment Ecosystem
28m"Cyber Security Investigations with Jupyter Notebooks"
25mAutomating Cyber Threat Intelligence: A Practical Approach to Managing Emerging Vulnerabilities
37mTracking Vulnerabilities with Buildroot and Yocto