NIST Proposes AI-Enabled NVD Overhaul After Cutting Routine CVE Enrichment
Brief
The National Institute of Standards and Technology is asking the cybersecurity community how artificial intelligence should reshape the National Vulnerability Database, more than two years after the agency began publicly pointing to automation as a solution for its growing vulnerability processing problems.
The Request for Information seeks input on improving the NVD's "scalability, automation, interoperability, transparency, and utility." A separate NIST blog post accompanying the RFI disclosed that the agency has begun developing an AI-enabled tool called V-etalon.
The announcement arrives four months after NIST moved most CVEs outside routine enrichment , and less than three months after a federal audit found that the agency had no strategic plan for the NVD, no workable plan to clear its backlog, and no sustainable process for keeping pace with new submissions.