Chapter 8

What is Vulnerability Assessment?

Almantas Kakareka,    Demyo, Inc.

Vulnerability assessment is an information security community standard to promote open and publicly available security content, and to standardize the transfer of this information across security tools and services. Also, vulnerability assessment is an XML specification for exchanging technical details on how to check systems for security-related software flaws, configuration issues, and patches. In addition, vulnerability assessment standardizes the three main steps of the assessment process: representing configuration information of systems for testing; analyzing the system for the presence of the specified machine state (vulnerability, configuration, patch state, ...

Get Managing Information Security, 2nd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.