In this presentation, the presenters NJ Ouchn and Rachid Harrando from vFeed talk about: - Introduction to vFeed - Common Vulnerability Structure - Vulnerability Correlation Engine This presentation was demonstrated live during the DNIF Konnect session held on 4th July 2019 - You can watch the complete session here: https://youtu.be/owp1q-XoBoc?t=412

1. VULNERABILITY CORRELATION
https://vfeed.io

2. ▸ Focus on data correlation
▸ No fancy dashboards
▸ Make it easy to use
OUR VISION

3. ▸ Idea emerges during a pentest assignment
▸ No solution to deal with correlated database
STORY

4. ▸ Correlated with hundreds of sources
▸ Aligned with the SCAP requirements (CVE, CWE, OVAL, CCE, CVSS…)
▸ Provide the right IOCs for vulnerability intelligence
▸ Quick deployment of threat response
FEATURES

5. VULNERABILITY STRUCTURE

6. DATA SCHEMA (JSON )

7. SOURCES (SAMPLE)

8. HOW IT WORKS ?
Using Python / SQLite JSON with backend systems
vFeed Data Deployment Service

9. DEMO TIME 1/2
▸ BlueKeep (CVE-2019-0708)
▸ DirtyCow (CVE-2016-5195)
▸ IoT hardcoded (CVE-2019-9975)
▸ Malware Zyklon (CVE-2017-8759)

10. DEMO 2/2
▸ Search for CPE vulnerabilities
▸ Few lines to do a huge tricks (vFeed lib)

11. DOCUMENTATION & TRIAL
▸ Python API docs https://github.com/vfeedio/
pyvfeed/wiki
▸ vFeed Professional Service Trial https://vfeed.io/
pricing/