Massive breaches have caused many companies to pursue stronger, more proactive measures for managing 漏洞 在他们的环境中. 然而,, as corporate infrastructures have become more complex—encompassing the cloud 和 spanning vast 攻击表面s—businesses have found it more difficult to achieve complete visibility into the rapidly proliferating 漏洞 across their ecosystems. 抓住这个机会, 网络犯罪分子已经学会了如何利用系统中的弱点链, 应用程序, 和人民.
脆弱性 management programs address today’s modern cybersecurity challenges by instituting a comprehensive 和 continuous process for identifying, 分类, 医治, 并在攻击者利用漏洞之前减轻漏洞.
这些漏洞管理程序的核心通常是一个 vulnerability scanner that automatically assesses 和 underst和s risk across an entire infrastructure, generating easy-to-underst和 reports that help businesses properly 和 rapidly prioritize the 漏洞 they must remediate or mitigate.
漏洞扫描程序自动执行 漏洞管理流程，通常分为以下四个步骤. 注意这一点很重要 一个好的漏洞管理过程应该持续地扫描漏洞 当它们被引入环境时，环境会迅速改变.
这是任何漏洞处理过程中的第一步也是最重要的一步, 当然, 是让您的环境中可能存在的所有漏洞都暴露出来. A vulnerability scanner goes about this by scanning the full range of accessible systems that exist—from laptops, desktops, 和 servers on to databases, firewalls, switches, printers, 和 beyond.
从那里, the vulnerability scanner identifies any open ports 和 services that are running on those systems, logging in to those systems 和 gathering detailed information where possible before correlating the information it obtains with known 漏洞. This insight can be used to create reports, metrics, 和 dashboards for a variety of audiences.
一旦您确定了整个环境中的所有漏洞, you’ll need to evaluate them in order to appropriately deal with the risks they pose according to your organization’s 网络安全风险管理 策略. Different vulnerability management solutions use different risk ratings 和 scores for 漏洞, but one commonly referenced framework for new programs is the Common 脆弱性 Scoring System (CVSS).
漏洞评分可以帮助组织确定 如何优先处理他们发现的漏洞， it’s important to also consider other factors to form a complete underst和ing of the true risk posed by any given vulnerability. It’s also worth noting that vulnerability scanners can generate false positives in rare instances, thus underscoring the necessity of including other considerations in addition to risk scores at this stage of the process.
在对发现的漏洞进行优先级排序之后, it’s important to promptly treat them in collaboration with your original business or network stakeholders. 取决于所讨论的漏洞, 治疗通常根据以下三种途径之一进行:
确定具体治疗策略时, 它最适合组织的安全团队, 系统所有者, 和 system administrators to come together 和 determine the right remediation approach—whether that’s issuing a software patch or refreshing a fleet of physical servers.
一旦补救被认为完成, 明智的做法是运行另一个漏洞扫描，以确保该漏洞已经存在, 事实上, 已被有效补救或减轻的.
Improving the speed 和 accuracy with which you detect 和 treat 漏洞 is essential to managing the risk that they represent, which is why many organizations continually assess the efficacy of their vulnerability management program. They can take advantage of the visual reporting capabilities found in vulnerability management solutions for this purpose.
拥有所需的洞察力, IT teams can identify which remediation techniques will help them fix the most 漏洞 with the least amount of effort. 安全团队, 对他们来说, can use this reporting to monitor vulnerability trends over time 和 communicate their risk reduction progress to leadership.
理想的解决方案包括 与IT票务系统集成 和 补丁管理 加快团队间信息共享的进程. 这有助于客户在降低风险方面取得有意义的进展. Businesses can also use these assessments to fulfill their compliance 和 regulatory requirements.
随着攻击面不断扩大，企业面临的风险也越来越大, 增加了可供黑客利用的漏洞数量. 脆弱性 management programs give companies a framework for managing these risks at scale, 以更快的速度检测整个环境中的漏洞. 与此同时, analytics help organizations continually optimize the techniques they use for remediation.
具有强大的漏洞管理程序或 托管漏洞管理(MVM) in place, businesses can better address the risks they face not only today but well into the future.