Development of Oval Based Vulnerability Management Tool (OVMT) on a Distributed Network Environment

摘要

This paper designs and implements an unified vulnerability assessment tool which can assess vulnerability of both a network and host systems together. The vulnerability database is constructed based on CVE to report vulnerabilities in standard. The network scanner is implemented using Nessus and the system scanner is implemented using OVAL. A tool managing both network scanner and system scanner is implemented and is controlled by Web manager with which user can assess systems at anywhere in a distributed environment through web if a web manager agent is installed. As a conclusion, the unified vulnerability assessment tool implemented in this paper can provide fast and more accurate vulnerability assessment and proper guidelines to corresponding vulnerabilities