Riskvista: A Comprehensive Study Of Security Tool Integration, Cyber Risk Scoring, And Dashboard-Based Decision Support In Enterprise Environments

Le résumé fourni par la source

Organizations utilize several security solutions (vulnerability scanners, static code analyzers, network discovery tools) for continuous cyber posture monitoring. Despite the high information value provided by such tools, it is difficult to unify, correlate, and interpret the outputs generated due to the disparate nature of the data. This significantly hinders the visibility and prioritization efforts of an organization. In this paper, I propose RiskVista, an open-source cyber risk assessment and integration prototype which gathers vulnerability data and asset information from various security tools using RESTful APIs or file imports, normalizes these data into a canonical form ACS (asset-centric schema) and calculates normalized risk scores for assets and business capabilities. RiskVista implements an understandable composite risk scoring system based on severity i.e CVSS, exposure, exploitability, and impact to the business. Scores range from 0 to 100 with corresponding letter grades to provide more intuitive understanding of the problem and allow triage. The solution features a web providing access to several dashboards including tool onboarding, vulnerabilities overview, most vulnerable assets, and business capability level risks. An evaluation methodology will be designed for future implementation of RiskVista.

Ce résumé expose les affirmations des auteurs. BNTIC ne l’interprète pas comme une validation indépendante des résultats.