system and method for scoring the assessment and classification of active information system

摘要

a solution (scorisk '') integrated in the concept of "market place corevidence o information technology is designed, in this environment, the calculation and the measurement of risk levels for the scans analysis and compliance assessment and compliance scans), su the basis of the following criteria: accuracy, structurethe common vulnerabilities reported by all engines scan involved; the weight (weight), based on the classification (scoring) on severity and cvss usability evaluation system.0, the predetermined identification or classification, where the vulnerability is identified as part of a list of risks according to the ordered list cwe / top 25; the persistence criterion measuring the persistence of the solution for integrated approach to vulnerability. e and overall safety of the assets. (see figure 2, figure 3).