qsc20 paris real time vulnerability detection

4.8 MB·

QUALYS SECURITY CONFERENCE 2020
Vulnerability Management
Detection & Response
(VMDR)
Chris Carlson
VP Product & Technology, Qualys, Inc.
Vulnerability Management Lifecycle
Vulnerability
Asset Inventory
Management
Do you know the type and
Do you know what all your assets
amount of open vulnerabilities?
are and where they are?
Threat Risk and
Patch
Prioritization
Management
Can you prioritize remediation
How can you deploy patches to close based on threat intelligence?
high-impact vulnerabilities?
People
Process
Tools
WannaCry Timeline and Remediation
700
DS MS17-010 Patch Release EternalBlue Flat WannaCry
AN Exploit Remediation
S 600
U
O Authenticated Scan / Agent Detection
H
T
500 New Remote Detection
340000 VMRe/Pmaetcdhia ptiroonc efrsosmes Patc“hEimergen
n c
gy
”
200
100
0
4 1 8 4 1 8 5 2 9 6 3
1 2 2 / 1 1 2 / / 1 2
/ / / 4 / / / 5 5 / /
3 3 3 4 4 4 5 5
One solution to Discover, Assess, Prioritize and Patch critical vulnerabilities
Asset Discovery
Detect known and unknown assets
Workflow to add an unmanaged
asset as a managed asset
Asset Inventory
Hardware, operating system, and
application inventory for all assets
Asset Normalization and
Categorization
Normalize Inventory data by
common attributes
Categorize by vendor, version, type

Vulnerability Management
Detect vulnerabilities by QID
CVE-to-QID mapping
CVSSv2 and CVSSv3 base scores
Security Configuration Assessment
CIS Benchmarks
Security-related misconfigurations