Overview and Status Report of MUVES (Modular Unix-Based Vulnerability Estimation Suite)

摘要

The Modular UNIX-based Vulnerability Estimation Suite (MUVES) is an integrated software system for vulnerability assessment in the UNIX operating system environment. It is being designed to handle a wide variety of current and future targets and threats by use of a generalized physical interaction model. The environment will be sufficiently flexible to support both production and experimental applications and various approximation methods. Goals of the MUVES system include improved configuration management of vulnerability analysis computer codes, portability of code to a variety of computer systems running the UNIX operating system, and minimization of code redundancy. This software is being developed using a total system life cycle approach to developing and maintaining the software, which emphasizes structured analysis and structured design. This report is an overview of the current status of the MUVES project. It discusses the development tools being used, presents the results, thus far, of the User Survey and the Analysis, and discusses the future directions for the project.