Perform Vulnerability Analysis

---

Goals

• Review Security Content Automation Protocol (SCAP).
• Explore the Common Vulnerability Scoring System (CVSS).
• Understand vulnerability validation concepts.
• Understand important contextual considerations.

Understanding Vulnerability Scoring Concepts

• Security Content Automation Protocol (SCAP)
  • Common Vulnerabilities and Exposures (CVE)
• Common Vulnerability Scoring System (CVSS)
  • CVSS Metrics
  • CVSS v4.0

Exploring Vulnerability Context Considerations

• Vulnerability Context
• Vulnerability Scanner
  • Vulnerability Scan Scope
• Vulnerability Scan Results
• Vulnerability Score Adjustment
• CVSS Metrics