Vulnerability Management, 2nd Edition

Contents

Preface

Acknowledgments

About the Author

1Introduction

1.1The Role of Risk Management

1.2Origins of VM

1.3Introducing the Security Industry and Its Flaws

1.4Challenges from Government and Industry

1.5Sources of Vulnerabilities

1.6Example of Flawed VM

1.7Why VM Is Important

2The Vulnerability Experience

2.1Introduction

2.2The Vulnerability Creation Process

2.2.1Complexity

2.2.2Communication

2.2.3Interoperability

2.3Creating Vulnerabilities: An Example

2.4Rationale for a VM Program

2.4.1Overexposed Network

2.4.2No Standard for Secure Systems Configuration

2.4.3Risk of Major Financial Loss

2.4.4Loss of Revenue

2.4.5Lost Productivity

2.5VM Program Failure

2.5.1Case Study #1: Getting the Organization Behind You

2.5.1.1Events

2.5.1.2Analysis ...