[8] Implementation and improvements of project name acquiring approach from NVD CVE data

[CermakM]

This task should continue and improve the work which has been done in #2485.
It is yet unknown whether the accuracy of the classifier is sufficient, only basic accuracy evaluation has been implemented atm, cross-validation remains to be done.

Also, the classifier used for this proof was an implicit one and can be further improved to provide more flexible and more suitable way to integrate with our current tools. The decision about the implementation will be based on cross-validation results and team members opinions.

Expected output:

An integrated tool handle NVD CVE data to suggest project name candidates from CPE description.

Sub tasks for sprint #2775

• Document the approach used for the POC in [8] Find a way how to get project name from NVD CVE data #2485
• Cross validation
• Improve and Implement the classifier in a way suitable for nvdlib
• Provide a complete and extensible tooling around this issue

[CermakM]

The implementation of the classifier (which was implemented as a self-containing library) can be found in the nvd-toolkit, the research and experiments around the task has been documented in both the nvd-toolkit as well as in the POC repository.

The cross validation is fully functional, the evaluation is still in progress, however, and the results will be published ASAP.