VULNERABILITY VECTOR INFORMATION ANALYSIS

摘要

Analyzing vulnerability vector information includes collecting information for a test performed by a vulnerability assessment tool to detect a vulnerability. Attributes of the test are determined from the collected information and are used to determine if there any matches with information in a security vulnerabilities information source.

主权项

1. A method of analyzing vulnerability vector information comprising:
collecting information for a test performed by a vulnerability assessment tool to detect a vulnerability; determining attributes of the test from the collected information; comparing, by a processor, the attributes with entries in a security vulnerabilities information source describing vulnerabilities; determining, from the comparison, whether the attributes match an entry of the entries in the security vulnerabilities information source for one of the vulnerabilities; and if a matching entry is determined, storing information from the matching entry with the collected information in a vulnerability management data storage system.