Intelligent Tool for Enterprise Vulnerability Assessment on a Distributed Network Environment Using Nessus and OVAL

摘要

This paper designs and implements a unified and intelligent tool for vulnerability assessment which can efficiently assess vulnerabilities of computer systems in which functions of the vulnerability assessment were distributed. Developing a vulnerability assessment tool needs two steps; constructing a vulnerability analysis database and implementing a vulnerability assessment tool. The vulnerability analysis database is constructed based on CVE to report vulnerabilities in standard assessment result forms by updating newest information, and is organized to be suitable to the distributed network. The vulnerability assessment tool is implemented using Nessus and OVAL. The vulnerability assessment tool suggested in this paper can provide fast and more accurate vulnerability assessment and proper guidelines to corresponding vulnerabilities.