preview

Zero Day Vulnerability Paper

Decent Essays

To deal with current trend of information security and sophisticated cyber threat we need the most efficient and best suited vulnerability management solution for our infrastructure as well as applications. As vulnerability management deal with people, process and technology; we need to choose each of them carefully. Technology is the pillar which is very vast and we cannot opt for multiple investment on the same. We need to be much cautious while choosing the same. One can take into account following parameters while choosing a vulnerability management solution: Capability in dealing with Asset Inventory: Does the solution provide an asset inventory database? Is it feasible to extend the database schema to support additional fields, such …show more content…

Can it auto-assign tickets based on rule sets defined (i.e., vulnerability, owner, asset classification, etc.)? These are the must have capability for a vulnerability management solution
Vulnerability research & Update capability: One need to check; how frequently do the vendor release updates? Does the distribution mechanism leverage industry-recognized security communications protocols? Does the vendor have its own vulnerability research team? How has the vendor responded to vulnerabilities in its own products?
Dealing with Zero day vulnerability: Does the tool possess capability to deal with Zero day vulnerability? Do the product possess Predicative analysis of the threat in your environment without the need to perform new scanning?
Reporting: Is the reporting detailed and customizable? Can we generate trend report? What are the report types? Are the output format of report reusable on other tools?
Remediation Policy enforcement: Does the product provide the capability to designate the selected remediation at varying enforcement levels, from mandatory (required) to forbidden (acceptable risk), via a centralized policy-driven

Get Access