The Network Vulnerability Tool (NVT) - A System Vulnerability Visualization Architecture

摘要

For the past two years, Harris Corporation has been conducting research for the U.S. Air Force Research Laboratory under the Network Vulnerability Tool (NVT) Study. The Network Vulnerability Tool concept develops and applies a single topological system model. This model supports the information needs of multiple vulnerability analysis tools using an integrated knowledge solicitation and translation framework. As part of this effort, vulnerability tools from COTS, GOTS, and research laboratory sources were surveyed, and a representative sample tool collection was selected for inclusion in the NVT prototype. The prototype integrates and interactively applies multiple existing vulnerability assessment technologies, resulting in a cohesive, combined vulnerability/risk assessment. The combined risk assessment provides a readily comprehensible picture of the risk posture, assisting the analyst in the definition of an acceptable risk posture for an operational system or preliminary system design. The NVT program has defined and developed a vulnerability assessment environment, consolidating multiple vulnerability sources and tools types into a coherent vulnerability visualization architecture. This paper describes the Network Vulnerability Tool architecture, its components, important architecture features, benefits of the NVT approach, and potential future enhancements.