topic Re: Vulnerability Profile by application in General Topics

Vulnerability Profile by application

itstrap — Sun, 03 Jun 2012 04:51:41 GMT

Hello,

My name is Jazmin, and I want to know if there's a way to create a Vulnerability Profile based on application or technology? I mean if you could select the vulnerabilities group by application, ie. "mysql" and automatically display all the associated vulnerabilities. Or I don´t know if it could be a way to create a filter by the ID of the Threat.

Best Regards,

Jazmin Ortiz

Re: Vulnerability Profile by application

rmonvon — Mon, 04 Jun 2012 21:20:43 GMT

Hi Jazmin...You can match 'mysql' under the Threat Name and that will filter on any threat where the text is found in the vuln name. Under Threat Name, you will find its usage - Used to match any signature containing the entered text as part of the signature name. Thanks.

Re: Vulnerability Profile by application

zarina — Mon, 04 Jun 2012 22:52:17 GMT

You can goto the vulnerability profile and to the exceptions tab: click on 'show all signatures' and search for the keyword

Re: Vulnerability Profile by application

itstrap — Tue, 05 Jun 2012 00:51:00 GMT

Thank you to both, but in this case that profile won´t be updated automatically when a new version of Threat database appears, right?

Regards,

Jazmin Ortiz

Re: Vulnerability Profile by application

rmonvon — Tue, 05 Jun 2012 02:35:48 GMT

If we use the filter in the Threat Name, then any new threat signs containing the text will also match. Existing threat signs will be updated and apply accordingly.

The exception list will remain static and not change after updates. Thanks.