Case file / Project 007
CISA Vulnerability Explorer
Explore monthly additions to CISA's public Known Exploited Vulnerabilities catalog with R and an interactive chart.
The purpose
Why this project
This project explores public cybersecurity data and uses R to turn catalog records into a chart visitors can examine month by month.
The questions
The Questions Behind the Work
Draft questions for this project, open to revision as the work continues:
- How do catalog additions change from month to month?
- How can R check and summarize a changing public dataset?
- How can the chart show when its data was released and explain its limits?
- What would make the data easier to explore and understand?
The process
From catalog to chart
A scheduled workflow checks CISA's public catalog daily. R validates the downloaded data and groups catalog entries by the month CISA added them. The website reads the prepared snapshot and lets visitors select a month.
The chart counts catalog entries currently listed by their date added. It does not count attacks, all vulnerabilities, or an organization's compliance. CISA can revise records, and the latest month may be incomplete. Scheduled runs may be delayed or unavailable.
Reflection
Returning to the questions
Findings, lessons, and future improvements will be added after the hands-on review.