A Vulnerability Assessment Tool Based on OVAL in System Block Model

摘要

OVAL (Open Vulnerability Assessment Language) is a standard language which is used to detect the vulnerability of local system based on the system characteristics and configurations. It is suggested by MITRE. OVAL consists of XML schema and SQL query statements. XML schema defines the vulnarable points and SQL query detects the vulnerable and weak points. This paper designed and implemented the vulnerability assesment tool with OVAL to detect the weak points in security countermeasure block. It has more readability, reliability, scalability and simplicity than traditional tools.