Design and Implement of a Novel OVAL-Compatible Vulnerability Assessment System
Due to the various kinds of information expressing and transferring standards made by different vendors, the existing security products can not interoperate with each other efficiently. In order to solve this problem, an OVAL-compatible multi- platform vulnerability assessment system (VAS) is proposed in this paper. First, it adopts OVAL as the vulnerability assessment standard. Second, it takes lightweight web server as foundational distributed computing platform. Third, it adopts the manger/agent architecture to improve assessment efficiency. Considering the fact that a computer network usually includes various kinds of operating systems, two versions of agents for Windows and Linux is implemented. So it supports multi- platform vulnerability assessment and security data sharing with other OVAL-compatible tools with high accuracy, assessing completeness and functional expansibility.