Method for verifying vulnerabilities of network devices using CVE entries

Abstract

The present invention relates to a method for verifying vulnerabilities of a network device using CVE entries, comprising generating a CVE tree according to each CVE entry, defining indexed CVE entries, where generating comprises identifying vulnerability configuration fields, and extracting, for each vulnerability configuration field, a set of vulnerability conditions comprising operator attributes and nested CPE records, where each set of vulnerability conditions comprises an operator attribute and a nested CPE record. The CVE tree is provided with an operator attribute as a node and a CPE record as a leaf from the node, where the decoding comprises tag parsing the decoded string into a sequence of a plurality of n-grams having a predetermined size, and where the matching comprises looking up the sequence of the plurality of n-grams in the CVE tree, if the operator attribute corresponds to OR, if the operator attribute corresponds to OR. An alert is issued if a match is found between at least one CPE record, and if a match is found between all CPE records when the operator attribute corresponds to the AND.

Description

technical field [0001] The present invention relates to the field of security methods and security systems in Common Vulnerability and Exposure (CVE) management. In particular, the present invention relates to a method for verifying vulnerabilities of network devices using CVE entries. Background technique [0002] The use of web applications and web services has become an integral part of almost every aspect of the business process cycle. In addition to promoting products and services online, businesses interact with customers via the Internet, and employees are using more and more Web-based tools for everyday tasks. Web applications have become the most commonly used platform for new software solutions. However, these effective and cost-effective tools introduce new risks and require better or different security measures to compensate for the open, rapid development style that has made the technology increasingly common. [0003] Hardware devices commonly used to connec...

AI Technical Summary

Problems solved by technology

[0009] Standardization is yet to be achieved, and in any case, the complex syntax of CVEs makes it difficult to provide structured and consistent access to data vulnerabilities

In particular, generating CPE is difficult because although it is a standard format, the standardization does not specify what information is contained in the CPE, so different products often follow different standards, where the same product is identified by different CPE logos, resulting in confusion and inconsistency

Additionally, the source information extracted from network protocols varies by protocol, adding another pain point to the process of generating CPE identities

Images