Training data is retrieved from the Agile database, while NVD and data pre-processing is applied on training data. A smart security model is created using Agile data which has "Fixes & Enhancements" information for each update and NVD that has a security score ranging from 0.0 through 10.0 for each CVE. The model assigns each update a security score that is the highest among all the possible CVEs contained within it.
As shown in Figure 5, if an update has no CVEs, the security score will be zero.