ipl-logo

National Vulnerability Database Paper

448 Words2 Pages

Analysis of National Vulnerability Database
One of the major reasons of the problems in an organization’s network is the application vulnerabilities. To help mitigate the application vulnerabilities, measurement of the overall IT security of the organization, and support regulatory compliance, National Vulnerability Database (NVD) is an online repository available for general public usage, published and maintained by the National Institute of Standards and Technology (NIST), and sponsored by National Cyber Security Division of Department of Homeland Security. In addition, NVD includes five primary elements: checklists of security, flaws of the software, problems in configuration, the names of the application, and metrics of impact (NIST, 2015). …show more content…

This expansive database is extremely valuable in finding out the patterns or trends of the vulnerabilities or flaws affecting a specific classification of software, and helps predict and manage the IS security when a similar software is utilized within the IT infrastructure of an organization. Additionally, numerous vulnerabilities in software are added to NVD every year, which undoubtedly helps controlling the known predicaments. However, network and application security personnel use NVD to also predict the undiscovered problems based on its extensive list of known issues, and prepare mitigation plans for the future consequences (Zhang, Caragea, & Ou, 2011). Moreover, the common categories of vulnerabilities that NVD has been proved successful in tackling are: cross-site scripting, SQL injection, cross-channel scripting, session management, cross-site request forgery, information disclosure, server and cryptographic configuration, and detection of malware (Brooks, Adger, & Kelly,

Show More
Related

  • Nt1330 Unit 1 Case Analysis Paper

    134 Words  | 1 Pages

    o Would it be useful to identify the core issue of the risk being addressed? In the month of July, 4 teams noted inability to safely evacuate from the home. Although this is risk, it is unclear why. If teams were to implement the 5 why’s, could they drill down to the core issue. For example, if the inability to evacuate was due to mobility, could we identify DME to mitigate that risk.

    Read More

  • Nt1310 Unit 4 Case Study

    143 Words  | 1 Pages

    Hi, Todd, how do you do? I hope my message finds you well. Regarding your request, we - GI_SSC_OM_S1 and GI_SSC_MFGPTS_S1 squads - only will be able to answer the Security and Risk questionnaire after we access the environment of our clients, that only will occur when Chris Maurer validates the data we sent to him from application owners and he informs us how we must to procede to start the access procedures without violate the export regulations rules from IBM. As we only receive part of the list that we sent to application owners (AO) yet, we have two situations right now: some data still under verification by AO and others under validation of Chris, as the graph bellow: Our PO and SLL are aware of this situation.

    Read More

  • Nt1310 Unit 5 Essay

    491 Words  | 2 Pages

    Exercises #3: There are many classification methods that can be used with IDPS’s systems. The main point of this system is to detect hostile actions. The first classification is based on the place where ID systems can be placed and the second one is based on analysis of the technique used. These ID systems can be classified into three main groups starting with Host Based Intrusion Detection System (HIPS), then Network Behavior Analysis (NBA), Network Based Intrusion Detection System (NIPS), and Wireless Intrusion Prevention System (WIPS). The WIPS it analysis the traffic of wireless network, NBA examines traffic to identify threats that generate unusual traffic flow, HIPS monitor single host for suspicious activity, NIPS it analyzes the traffic of entire network.

    Read More

  • Nt1310 Unit 3 Risk Management

    392 Words  | 2 Pages

    Regardless of the storage media, devices, procedures, or organization, someone is (or should be) responsible for ensuring that all data backups completed without errors. In a large organization the duty can fall to someone within the Information Technology function. In this example, that someone is the Windows administrator. As a Windows administrator within that function and If and only if I had the authority, I would set up a personnel scheduling, reporting and certification system to log all backup media, its’s current location, its’ label and the backups destination. Since the backup is certified by the person completing the backup, it does provide assurance that the backup was completed.

    Read More

  • Nt1330 Unit 3

    630 Words  | 3 Pages

    41. Do we use automated tools to assess system/network vulnerabilities?

    Read More

  • Nt1310 Unit 1

    410 Words  | 2 Pages

    With widespread use of internet services, the network scale is expanding on daily basis and as the network scale increases so will the scale of security threats which can be applied to system connected to the network. Viruses and Intrusions are amongst most common threats that affects computer systems. Virus attacks can be controlled by proper antivirus installation and by keeping the antivirus up to date. Whereas any unauthorized access in the computer system by an intruder can be termed as Intrusion and controlled by IDS. Intruders can be grouped into two major categories which are external and internal Intruders.

    Read More

  • Acct 391 Unit 1 Business Security And The Future

    1670 Words  | 7 Pages

    Marques Underwood INSS 391 Security and the Future With the transition of companies leaning towards advancing through the usage of big data, cybersecurity and the trends in technology are creating an increase in threats. The goal is to protect the databases and devices used at these companies before they are hacked and compromised for unwanted reasons. We’ll see the general concerns with security in the IT field, and steps that specific companies are taking to prevent and adopt to the landscape of the future in security. Devices are increasing at a rapid pace these days, meaning the more data is being expanding.

    Read More

  • Baldridge Criteria For The Homeland Security Assessment Team

    783 Words  | 4 Pages

    As a member of the Homeland Security Assessment Team for our organization, we will attempt to build a program that will allow us to meet the goals of our business plan as well as the needs of our Homeland Security Assessment that we will create from the results of our evaluation of our organization (Fisher, 2004). We will utilize the Baldridge Criteria to combine our two-goal seeking areas of our business plan as well as our Homeland Security Assessment goals that we are identified at the conclusion of our Homeland Security Assessment. When we do our Baldridge Criteria measurements of our organization we will be able to determine the areas of our organization that we are already protected from weaknesses and vulnerabilities; and will be able

    Read More

  • Peter's Risk Assessment Paper

    695 Words  | 3 Pages

    Then, questions, mostly opened-ended and a few closed- ended, will be utilize to assess Peter: Are you or your family experiencing homelessness or food insecurity ended, will become more specific: 1. On a scale of 5-10, 10 being the highest, are your physical capabilities 2. 2. What medication (s) was prescribed by the clinic’s PCP? Why do you think it was prescribed?

    Read More

  • 9/11 Security Research Paper

    441 Words  | 2 Pages

    Stop! Look around you for a second. What do you see? I see the government in every security camera I walk by. I see the government at every turn in an airport or at a sports game.

    Read More

  • Army Warrant Officer Candidate

    329 Words  | 2 Pages

    With the demands and high tempo of standing up the new cyber field, the U.S. Army will not only require technical experts, but strong proven leaders to mentor and guide the next generation of cyber professionals. I firmly believe that SSG Worley has shown that he is more than capable of being such a leader. As a result, I am pleased to recommend SSG Worley for the Warrant Officer Candidate Program and the 170A Cyber Operations

    Read More

  • 2014 Quadrennial Homeland Security Review Paper

    1504 Words  | 7 Pages

    That is why the Federal Government has taken an important step by creating many online portals that facilitate the exchange of information between all partners that make up the Homeland Security Enterprise (HSE) (Joint Program Office, n.d.). Some of the online portals created by the Federal Government include, but are not limited to, the Technical Resource for Incident Prevention (Tripwire), Law Enforcement Online (LEO), Bomb and Arson Tracking System (BATS), and the National Counterterrorism Center (NCTC) Current, among others (Joint Program Office,

    Read More

  • Cybersecurity Data Standard Codes Paper

    632 Words  | 3 Pages

    Agencies have new instructions now for assigning standard codes to their cybersecurity positions. The Office of Personnel Management revised standard data codes for information technology and cyber-related positions. New guidance recognizes nine categories and 31 specialty areas of cyber functions. Using these codes will help agencies better understand their work requirements and skills and compare them to the private sector and academia, OPM wrote in a Jan. 4 memo to agencies.

    Read More

  • Nt1330 Unit 3 Project Management Plan

    691 Words  | 3 Pages

    It continuously monitors configurations for drift, vulnerabilities and risk-inducing changes, and provides a suite of workflows to simplify change reconciliation, incident investigation, and daily management. (Open Source Roots to Secure Enterprise Security,

    Read More

  • Summary Of Strengths Finder 2.0 By Tom Rath

    654 Words  | 3 Pages

    In “Strengths Finder 2.0,” Tom Rath informs us that, “You cannot be anything you want to be- but you can be a lot more of who you already are” (Rath p9). I agree with him in the fact that we must focus on our strengths rather than trying to better our weaknesses in order to become successful. So many people today put their attention towards improving their weaknesses that they are surpass by others who focus on their strengths. After learning my own personal strengths, I have a better understanding of who I am and how to focus on these both in school and in the workforce.

    Read More

More about National Vulnerability Database Paper

Open Document