Process / pipelineSecurity testing and evaluation
Vulnerability Assessment
Vulnerability assessment is a systematic process of identifying, quantifying, and prioritizing security weaknesses in systems, networks, and applications. Using automated scanning tools and manual techniques, organizations discover unpatched software, misconfigurations, weak cryptographic practices, and other exposures that attackers could exploit.
Open in MethodMindSoonVideoSoon
Read the full method
Members only
Sign inSign in with a free account to read this section.
Sources
- National Institute of Standards and Technology (2012). Guide for Conducting Security Patch Management Activities. NIST Special Publication 800-40 Revision 3. link ↗
- Tenable (2023). Nessus Vulnerability Scanner. Open Source Project and Commercial Platform. link ↗
- National Institute of Standards and Technology (2023). Common Vulnerability Scoring System Version 3.1. CVSS SIG. link ↗