Chapter 6: Vulnerability Analysis
Vulnerability management is the process of using tools, processes, and knowledge to reduce risk related to IT systems. This includes the entire life cycle, from initially discovering vulnerabilities through reporting them, prioritizing them according to business needs, remediating them through software or procedural changes, verifying that they have been fixed, and documenting lessons learned for the future.
Note that vulnerability management is not a one-time event. It's an ongoing process that needs to be revisited regularly. New vulnerabilities are discovered all the time, and old ones are fixed or become irrelevant. You need to make sure your systems are always up-to-date and that your patches are current.
In this chapter, we'll cover the following topics:
- Vulnerability analysis – where to start
- Vulnerability classifications
- The life cycle
- Ongoing scanning and monitoring
Let's dive in!
...
