Tshireletso ea Content Automation Protocol (SCAP)

SCAP e bolela'ng?

SCAP ke selelekela sa Security Content Automation Protocol. Morero oa oona ke ho sebelisa litekanyetso tse seng li amoheloa ke mekhatlo e sa nang le eona hona joale kapa e nang le mekhoa e fokolang.

Ka mantsoe a mang, e lumella batsamaisi ba tshireletso hore ba hlahlobe lik'homphieutha, mananeo, le lisebelisoa tse ling ho latela motheo oa tšireletso o reretsoeng pele ho fumana hore na lisebelisoa le lisebelisoa tsa software li sebelisoa joang ho latela tekanyo eo ba e bapisoang le eona.

Lekala la National Vulnerability Database (NVD) ke lefapha la litaba tsa 'muso oa US bakeng sa SCAP.

Tlhokomeliso: Litekanyetso tse ling tsa tšireletso tse tšoanang le SCAP li kenyeletsa SACM (Security Automation le Continuous Monitoring), CC (Mathata a Tloaelehileng), TAG (Software Identification), le FIPS (Federal Information Processing Standards).

SCAP e na le Lihlopha Tse peli Tse ka Sehloohong

Ho na le likarolo tse peli tse kholo ho Security Content Automation Protocol:

SCAP Content

Lisebelisoa tsa SCAP di-content li fumaneha ka bolokolohi boitsebiso bo entsoeng ke National Institute of Standards le Technologies (NIST) le balekane ba eona ba indasteri. Li-module modules li entsoe ka "lits'ireletso tse sireletsehileng" tse lumellanang ke NIST le balekane ba SCAP.

Mohlala e ne e tla ba Setsi sa Tsamaiso ea Federal Desktop Core, e leng ts'ireletso e tiileng ea phetoho ea liphetolelo tse ling tsa Microsoft Windows . Lintlha tsena li sebetsa e le motheo oa ho bapisa lisebelisoa tse nkiloeng ke lisebelisoa tsa SCAP.

Likepe tsa SCAP

Sesebelisoa sa SCAP ke sesebelisoa se bapisang k'homphieutha e lebisitsoeng kapa kopo ea lisebelisoa le / kapa patch e khahlanong le sekala sa motheo sa SCAP.

Sesebelisoa se tla hlokomela mefokolo leha e le efe le ho hlahisa tlaleho. Lisebelisoa tse ling tsa SCAP li boetse li na le matla a ho lokisa k'homphieutha e lebisitsoeng le ho e tlisa tumellanong le motheo oa motheo.

Ho na le li-SCAP tse ngata tsa khoebo le tse bulehileng tse fumanehang ho ea ka sebopeho se lakatsehang. Lisebelisoa tse ling li reretsoe ho hlahloba litekanyetso tsa lits'ebetso ha tse ling li etselitsoe ho sebelisa PC ka bomong.

O ka fumana lethathamo la lisebelisoa tsa SCAP ho NVD. Mehlala e meng ea lihlahisoa tsa SCAP li kenyelletsa ThreatGuard, Tenable, Red Hat, le IBM BigFix.

Bahoebi ba lisebelisoa ba hlokang hore sehlahisoa sa bona se tiisetsoe e le ho lumellana le SCAP, ba ka ikopanya le laborateng e netefatsang ea SCAP ea NVLAP.