Organizations are overwhelmed with data from vulnerability scanners. While scanning is necessary, it isn’t enough. The Core Attack Intelligence Platform is able to consolidate vulnerability scanner sources, no matter the location or type of scanner. The result of this is a unified repository of vulnerability data. After the data is consolidated, exploits are matched and prioritized, followed by our patented “attack path engine” simulating potential attack paths to critical business assets. This results in a more focused, prioritized set of data, ready for validation and remediation. Prioritizing vulnerabilities helps narrow the list of vulnerability data by 90%.

1. P A G E ©2014 Co re Secur i t y
How Mature is Your Vulnerability Management Program?
Black Hat 2014

2. P A G E ©2014 Co re Secur i t y
We’ve Got a Problem 2
This month’s vulnerability scanner results
“A common model where all assets are scanned monthly … will include 1 million to 5 million findings”
- Gartner

3. P A G E ©2014 Co re Secur i t y
VULNERABILITY OVERLOAD 3

4. P A G E ©2014 Co re Secur i t y
So What Caused All This?
•
Beyond exponential asset growth = bloated vuln scanner results
•
Frequent M&A activities
•
Virtualization in datacenters
−
No longer one server to one application
−
Multiple workloads per server
−
Potentially exploitable vulnerabilities skyrocket
Scanning is necessary, but isn’t enough 4

5. P A G E ©2014 Co re Secur i t y
How Mature is Your Vulnerability Mgmt Program? 5
Analysis & Prioritization
Single Dashboard and Reporting
Unified Repository
Actionable Data
MATURITY
Attack Path Planning
Attacker & Threat Focused
Integrated to Business Risk
Critical Asset Risk
Vulnerability Scanning
Web/Network Scanning
CVSS Scoring
Exploit Matching
STAGE 1
STAGE 2
STAGE 3
DATA OVERLOAD
EFFECTIVE PRIORITIZATION

6. P A G E ©2014 Co re Secur i t y
What Does This Mean to You? 6
Focus on what matters most…
Narrow the list of vulnerability data by 90%