Data for web security/database security issues

Question

I'm still thinking of a topic for my bachelor's thesis. I'm thinking of something like machine learning application on web security/database security. Problem is, in machine learning I need to have data. So I thought I'll base my topic on what kind of data I would get. Example, I found data on web intrusion then I'll have a topic somewhere on the line of web intrusion detection.

Answer 1

CVE is a freely usable database of security issues, many of them related to web/database.

The CVE database can be downloaded at https://cve.mitre.org/data/downloads/index.html as XML, CSV, and other formats.

A typical entry includes:

• Name
• Description
• Status
• Phase
• References

Answer 2

NVD is a freely usable dictionary which consist of vulnerabilities.

Also, this dictionary belongs to NIST. Therefore this dictionary always up to date.