CVE Prophet

I was recently asked if I had ever thought about trying to predict CVE growth. I had not, or really didn’t even know where to start, but after some research, I found the Prophet project that is a forecasting algorithm open-sourced by Facebook and uses the GAM family of algorithms.

Using prophet with the NVD data in a Jupyter notebook was a lot easier than I expected, and for the first iteration, I am thrilled with the outcome.

Graphs

This is the default prediction graph from Prophet.
This is the default prediction graph from Prophet with change points added.

Data

Looking at the individual data points is extremely interesting. Here are the top 10 predicted days for the rest of the year, and it will be interesting to see how close the prediction is.

DatePredictionPrediction LowPrediction High
2021-10-2078.040.0114.0
2021-10-1378.038.0111.0
2021-10-0677.039.0114.0
2021-10-2775.038.0113.0
2021-07-2175.039.0112.0
2021-09-2975.038.0111.0
2021-09-2274.035.0112.0
2021-10-2174.037.0108.0
2021-10-1474.041.0114.0
2021-07-2874.036.0109.0

Code

I have put the Jupyter notebook in this Github Repo and will continue to make updates and tweaks to explore time series prediction.

Site Footer