#LANGUARD NETWORK SCANNER 3.3 PC#

Martin, CVE Compatibility Lead, presented a briefing about CVE and OVAL on December 3rd, 2003 entitled ' CVE and OVALВ—Security Standards that Are Making a Difference' at the Fifth Annual Secure Trusted Operating System Consortium Symposium in Washington, D.C., USA. It will define the attributes needed to find vulnerabilities in a system, to prioritize them and fix them.'Д¬VE Presents Briefing at Fifth Annual Secure Trusted Operating System Consortium Symposium OVAL will provide standards so that automating vulnerability management can be more effective, Martin said. The author concludes the article with the following statement about OVAL: 'Although testing and scanning tools are becoming common for discovering vulnerabilities in computer systems, there are no standards for these tasks. The author describes the creation of CVE in 1999, mentions the information security community component of the CVE Editorial Board, mentions that CVE is funded by the Department of Homeland Security, and describes CVE Compatibility noting that 'Both the National Institute of Standards and Technology and the Defense Department recommend that agencies give preference to CVE-compatible products' and 'To date, 143 computer security products or services from 96 organizations are compatible with the scheme, using CVE designations to identify vulnerabilities.' The author also includes the current number of entries on the CVE List: ' now contains about 2,572 entries, with another 3,832 under evaluation.' ' Martin goes on to say that OVAL is the next step in standardizing vulnerability management.Д¬VE, which plays a large part in OVAL as all OVAL queries are based on CVE names, is mentioned throughout the article. Martin: ' how you describe the test conditions for vulnerabilities. The article quotes CVE Compatibility Lead Robert A. For additional information about this and other CVE-compatible products, visit the CVE-Compatible Products and Services page.Д¬VE Mentioned in Article about OVAL in Government Computer NewsД¬VE was mentioned in a Decemarticle in Government Computer News entitled ' Look it up: A common language for vulnerabilities.' The main topic of the article is MITRE's Open Vulnerability Assessment Language (OVAL) effort. has declared that its application security scanner, TrustSight Security Scanner, will be CVE-compatible.

#LANGUARD NETWORK SCANNER 3.3 PC#

In a Performance Analysis section, the article noted that PC Labs checked for a number of CVE candidates during their testing of the scanners under review, including: CAN-2003-0715, CAN-2003-0528, and CAN-2003-0605 CAN-2003-0660 CAN-2003-0682, CAN-2003-0693, and CAN-54 and CAN-2002-0400.ДЇinally, five of the six scanners reviewedВ—GFI LANguard Network Security Scanner 3.3, Nessus Scanner, Retina Network Security Scanner, SAINT 5, and Security Analyzer 5.0В—are listed on the CVE-Compatible Products and Services page. The article includes a Summary of Features chart in which CVE is included as a feature under the reporting category: 'Reports include data for Bugtraq/CVE.' Five of these six scanners under review are noted as including CVE names. ' Though not mentioned in the article, another of the scanners being reviewed, SAINT 5, also checks for CVE names. In the Nessus review, the author provides a link to the CVE Web site: 'Links to the Common Vulnerabilities and Exposures (CVE) dictionary ( ), which lists known vulnerabilities. Of these, CVE is noted as a product feature in the review text of four of them: GFI LANguard Network Security Scanner 3.3, Retina Network Security Scanner, Nessus Scanner, and Security Analyzer 5.0.

In the article the author discusses vulnerability assessment in general and reviews six scanners. CVE Included in Article about Vulnerability Assessment Scanners in PC MagazineД¬VE was included in an article entitled ' Network Security: Know Your Weaknesses' in the Decemissue of PC Magazine.

Languard network scanner 3.3