Measuring CVE Performance Vuln4Cast 2024, Ben Edwards
https://bjedwards.observablehq.cloud/measuring-cna-performance/

What about Forecasting?

Forecasting requires data

Before we predict we need to know what variance makes sense

Volume requires knowing how many CNAs

Specific measures (CVSS, Exploitation) requires knowing distribuiton

May forceasting descisions to be made

Time Granularity (Yearly? Monthly?)

Model Type (ARIMA, ETS, BATS, STL?)

Mousing over will desplay the historic data as well as the last forecast value on the right hand side with the CNA name. Searching for the CNA in the list and clicking the checkboxes on the left column of the table to fix the dispaly of a CNA, and display the uppper and lower bounds for that CNA for the last prediction.