CIOL: Developer: Tips: Vulnerabilities on desktops

Tips to detect vulnerabilities on desktops

OVAL is an information security standard to promote open security content. We take a look at a tool called System Security Analyzer (SSA) which uses OVAL to detect vulnerabilities on desktops

Friday, August 17, 2007

Comments

RSS

Swapnil Arora

Earlier, there was no common standard for detecting vulnerabilities on a Windows desktop. Things are however changing. There is a standard called OVAL, which is aimed at promoting open security content.

The Open Vulnerability and Assessment Language (OVAL) aims to regulate transfer of information across all security related services and applications. It has standardized the configuration of systems for testing, assessment and reporting.

Direct Hit!

Applies To: IT managers
Price: Free
USP: First GUI tool to use OVAL
Primary Link: www.securitydatabase.com/ssa.php Google Keywords: OVAL security database

In OVAL, technical details of how to detect a particular vulnerability are publically shared and its definition database is built by collaboration amongst vendors, security companies and consultants. Moreover, OVAL allows sharing of technical details regarding identification of the presence or absence of vulnerabilities on a computer system.

Earlier OVAL could be only used through a command line tool from 'mitre.org,' but now the process has been eased with System Security Analyzer (SSA). It has a simple GUI and also provides easy to understand reports. Currently, the software runs on Windows Vista, XP and 2000.

NEXT>>