ipl-logo

National Vulnerability Database Paper

448 Words2 Pages

Analysis of National Vulnerability Database
One of the major reasons of the problems in an organization’s network is the application vulnerabilities. To help mitigate the application vulnerabilities, measurement of the overall IT security of the organization, and support regulatory compliance, National Vulnerability Database (NVD) is an online repository available for general public usage, published and maintained by the National Institute of Standards and Technology (NIST), and sponsored by National Cyber Security Division of Department of Homeland Security. In addition, NVD includes five primary elements: checklists of security, flaws of the software, problems in configuration, the names of the application, and metrics of impact (NIST, 2015). …show more content…

This expansive database is extremely valuable in finding out the patterns or trends of the vulnerabilities or flaws affecting a specific classification of software, and helps predict and manage the IS security when a similar software is utilized within the IT infrastructure of an organization. Additionally, numerous vulnerabilities in software are added to NVD every year, which undoubtedly helps controlling the known predicaments. However, network and application security personnel use NVD to also predict the undiscovered problems based on its extensive list of known issues, and prepare mitigation plans for the future consequences (Zhang, Caragea, & Ou, 2011). Moreover, the common categories of vulnerabilities that NVD has been proved successful in tackling are: cross-site scripting, SQL injection, cross-channel scripting, session management, cross-site request forgery, information disclosure, server and cryptographic configuration, and detection of malware (Brooks, Adger, & Kelly,

Show More
Related
491 Words | 2 Pages

Exercises #3: There are many classification methods that can be used with IDPS’s systems. The main point of this system is to detect hostile actions. The first classification is based on the place where ID systems can be placed and the second one is based on analysis of the technique used. These ID systems can be classified into three main groups starting with Host Based Intrusion Detection System (HIPS), then Network Behavior Analysis (NBA), Network Based Intrusion Detection System (NIPS), and Wireless Intrusion Prevention System (WIPS). The WIPS it analysis the traffic of wireless network, NBA examines traffic to identify threats that generate unusual traffic flow, HIPS monitor single host for suspicious activity, NIPS it analyzes the traffic of entire network.

Read More
134 Words | 1 Pages

o Would it be useful to identify the core issue of the risk being addressed? In the month of July, 4 teams noted inability to safely evacuate from the home. Although this is risk, it is unclear why. If teams were to implement the 5 why’s, could they drill down to the core issue. For example, if the inability to evacuate was due to mobility, could we identify DME to mitigate that risk.

Read More
392 Words | 2 Pages

Regardless of the storage media, devices, procedures, or organization, someone is (or should be) responsible for ensuring that all data backups completed without errors. In a large organization the duty can fall to someone within the Information Technology function. In this example, that someone is the Windows administrator. As a Windows administrator within that function and If and only if I had the authority, I would set up a personnel scheduling, reporting and certification system to log all backup media, its’s current location, its’ label and the backups destination. Since the backup is certified by the person completing the backup, it does provide assurance that the backup was completed.

Read More
630 Words | 3 Pages

41. Do we use automated tools to assess system/network vulnerabilities?

Read More
143 Words | 1 Pages

Hi, Todd, how do you do? I hope my message finds you well. Regarding your request, we - GI_SSC_OM_S1 and GI_SSC_MFGPTS_S1 squads - only will be able to answer the Security and Risk questionnaire after we access the environment of our clients, that only will occur when Chris Maurer validates the data we sent to him from application owners and he informs us how we must to procede to start the access procedures without violate the export regulations rules from IBM. As we only receive part of the list that we sent to application owners (AO) yet, we have two situations right now: some data still under verification by AO and others under validation of Chris, as the graph bellow: Our PO and SLL are aware of this situation.

Read More
410 Words | 2 Pages

With widespread use of internet services, the network scale is expanding on daily basis and as the network scale increases so will the scale of security threats which can be applied to system connected to the network. Viruses and Intrusions are amongst most common threats that affects computer systems. Virus attacks can be controlled by proper antivirus installation and by keeping the antivirus up to date. Whereas any unauthorized access in the computer system by an intruder can be termed as Intrusion and controlled by IDS. Intruders can be grouped into two major categories which are external and internal Intruders.

Read More
329 Words | 2 Pages

With the demands and high tempo of standing up the new cyber field, the U.S. Army will not only require technical experts, but strong proven leaders to mentor and guide the next generation of cyber professionals. I firmly believe that SSG Worley has shown that he is more than capable of being such a leader. As a result, I am pleased to recommend SSG Worley for the Warrant Officer Candidate Program and the 170A Cyber Operations

Read More
695 Words | 3 Pages

Then, questions, mostly opened-ended and a few closed- ended, will be utilize to assess Peter: Are you or your family experiencing homelessness or food insecurity ended, will become more specific: 1. On a scale of 5-10, 10 being the highest, are your physical capabilities 2. 2. What medication (s) was prescribed by the clinic’s PCP? Why do you think it was prescribed?

Read More
783 Words | 4 Pages

As a member of the Homeland Security Assessment Team for our organization, we will attempt to build a program that will allow us to meet the goals of our business plan as well as the needs of our Homeland Security Assessment that we will create from the results of our evaluation of our organization (Fisher, 2004). We will utilize the Baldridge Criteria to combine our two-goal seeking areas of our business plan as well as our Homeland Security Assessment goals that we are identified at the conclusion of our Homeland Security Assessment. When we do our Baldridge Criteria measurements of our organization we will be able to determine the areas of our organization that we are already protected from weaknesses and vulnerabilities; and will be able

Read More
441 Words | 2 Pages

Stop! Look around you for a second. What do you see? I see the government in every security camera I walk by. I see the government at every turn in an airport or at a sports game.

Read More
1504 Words | 7 Pages

That is why the Federal Government has taken an important step by creating many online portals that facilitate the exchange of information between all partners that make up the Homeland Security Enterprise (HSE) (Joint Program Office, n.d.). Some of the online portals created by the Federal Government include, but are not limited to, the Technical Resource for Incident Prevention (Tripwire), Law Enforcement Online (LEO), Bomb and Arson Tracking System (BATS), and the National Counterterrorism Center (NCTC) Current, among others (Joint Program Office,

Read More
531 Words | 3 Pages

During the 60's and 70's everything that had to do with technology and computer security was basically new for everyone.   This report explored the risks that information in computers

Read More
739 Words | 3 Pages

Digital MDRs are laser focused on monitoring digital risks that organizations face on social, mobile and web channels. Their sophisticated digital risk monitoring tools do not only guard traditional internet gateways but also face inward to detect threats that usually go unseen by the perimeter security

Read More
654 Words | 3 Pages

In “Strengths Finder 2.0,” Tom Rath informs us that, “You cannot be anything you want to be- but you can be a lot more of who you already are” (Rath p9). I agree with him in the fact that we must focus on our strengths rather than trying to better our weaknesses in order to become successful. So many people today put their attention towards improving their weaknesses that they are surpass by others who focus on their strengths. After learning my own personal strengths, I have a better understanding of who I am and how to focus on these both in school and in the workforce.

Read More
444 Words | 2 Pages

Throughout my high school years, I discovered my passion for Computer Information Systems, particularly in the field of cybersecurity and threat defense. I attended a career readiness school called the Center for Advanced Learning, where I enrolled in their Computer Information Systems program. This program provided me with the foundational knowledge and skills necessary to pursue a career in this field. During my two years at the Center for Advanced Learning, I took a range of courses that covered different aspects of Computer Information Systems.

Read More

More about National Vulnerability Database Paper

Related Topics

Open Document