Papakupu Haumarutanga Xygeni
Papakupu Haumarutanga Whakawhanaketanga me te Tukunga Pūmanawa

He aha te CVSS

He Kupu Whakataki ki te CVSS #

Ko te Pūnaha Whakatau Irakore Whānui (CVSS) he standardanga whakapūmau mō te aromatawai me te whakatau i te kaha o ngā ngoikoretanga pūmanawa. Ka tohaina e te CVSS he kaute tau i waenga i te 0.0 me te 10.0, ko ngā kaute teitei ake e tohu ana i ngā ngoikoretanga tino nui. Mā te mārama he aha te CVSS, ka taea e ngā whakahaere te whakatau i ngā kaupapa matua o ā rātou mahi whakatikatika. Hei tāpiri, ka whakaratohia e te Pūnaha Whakatau i ngā Whakaraeraetanga Whānui he tikanga aromatawai mōrearea ōrite. Nō reira, ka taea e ngā tīma haumarutanga te arotahi ki ngā tūmomo mōrearea tino nui, ka whakapai ake i te tūnga haumarutanga whānui.

Tautuhinga:

He aha te CVSS? #

Ko te Pūnaha Whakatau Irakore noa, i whakawhanakehia e te Forum of Incident Response and Security Teams (FIRST), e tuku ana i tētahi huarahi pūnaha hei ine i te kaha o te ngoikoretanga. Inaa, ka whakaratohia e te CVSS tētahi tikanga whakatau whānui e whakamahia whānuitia ana i roto i te haumarutanga tukutuku me te haumarutanga tono (AppSec). Heoi anō, mā te mōhio ki te CVSS ka āwhina i ngā tīma haumarutanga. standardaromatawai mōrearea. Nō reira, ka taea e ngā kaipupuri katoa te mārama ki te kaha me te pānga o ngā ngoikoretanga. Nō reira, mā te whakauru i te Pūnaha Whakatau Irakore Whānui ki roto i ngā mahi haumarutanga ka nui ake te māramatanga me te whai huatanga.

Te Mahi a te Pūnaha Whakatau Whakaraeraetanga Noa #

te CVSS ka arotake i ngā ngoikoretanga mā te whakamahi i ngā rōpū ine matua e toru. Ko ēnei rōpū ko:

1. Ngā Inenga Tūāpapa #

Koinei ngā āhuatanga taketake o tētahi ngoikoretanga. Ina koa, ko te CVSS kei roto i ēnei:

  • Te Waehere Whakaeke (AV) – Me pēhea te whakamahi i te ngoikoretanga (hei tauira, whatunga, ā-rohe).
  • Te Uauatanga o te Whakaeke (AC) – Te taumata uaua o te whakamahi.
  • Ngā Mana Motuhake e Hiahiatia ana (PR) – Te taumata urunga e hiahiatia ana mō te whakamahi.
  • Te Taunekeneke a te Kaiwhakamahi (UI) – Mehemea he mea tika kia mahi te kaiwhakamahi.
  • Inenga Paanga – Te pānga ki Te Matatapu (C), Ngākau Pono (I), a Te Wātea (A).
2. Ngā Inenga Wā #

E whakaata ana ēnei i ngā āhuatanga e rerekē ana i roto i te wā. Hei tauira:

  • Te Paunga o te Waehere Whakamahi – Te wātea o te waehere whakamahi.
  • Taumata Whakaora – Mēnā kei te wātea ngā pāti, ngā whakaiti rānei.
  • Pūrongo Whakapono – Te pono o te pūrongo ngoikoretanga.
3. Inenga Taiao #

Ka urutauhia e ēnei inenga te Kaute Tūāpapa ki te taiao motuhake o tētahi whakahaere. Hei tauira:

  • Nga whakaritenga haumaru – Te hiranga o te noho muna, te pono, me te wātea.
  • Ngā Inenga Pūtake Kua Whakarerekētia – Ngā whakarerekētanga e whakaata ana i te horopaki o te whakahaere.

He aha te hiranga o te CVSS #

māramatanga he aha te CVSS he mea nui mo CISNgā Kaiwhakahaere Matua (CIO), me ngā tohunga haumarutanga. Ina koa, he āwhina te Common Vulnerability Scoring System nā te mea:

  • Ka Whakatairanga i ngā WhakaraeraetangaHeoi anō, mā tēnei ka whakarite kia arohia ngā take tino nui i te tuatahi.
  • StandardTe Whakawhitiwhiti Kōrero: I etahi atu kupu, te Pūnaha Whakatau Whakaraeraetanga Noa e whakarato ana i tētahi reo whānui hei matapaki i te kaha o te ngoikoretanga.
  • Tautoko i te Whakatutukitanga: Heoi anō, he maha ngā ture e whakahau ana kia whakamahia CVSS mo te whakahaere morearea.
  • Ka whakapai ake i te kahaNō reira, mā te whakamahi, ka taea e ngā tīma haumarutanga te whakahaere i te tukanga whakahaere ngoikoretanga.

Nō reira, mā te whakauru i te CVSS ka āwhina i ngā whakahaere ki te whakahaere i te mōrearea kia whai hua ake, me te tohatoha rauemi ki te whakaaro nui.

Ngā Awhe Kaute CVSS #

CVSS ka taka ngā kaute ki ngā wāhanga e whā:

  • Raina: 0.1 - 3.9
  • pāpāho: 4.0 - 6.9
  • Teitei: 7.0 - 8.9
  • Aitene: 9.0 - 10.0

Heoi, e mohio ana he aha te CVSS ā, mā ēnei awhe kaute ka āwhina i ngā tīma ki te whakatau tika i ngā ngoikoretanga.

Ngā Wero o te Pūnaha Whakatau Whakaraerae Noa #

  • Te kore o te HoropakiHei tauira, kāore ngā kaute CVSS e whakaata i ngā pānga pakihi motuhake i ngā wā katoa.
  • Ngā Kaute Pūtake TūmauHei tāpiritanga, kāore pea ngā kaute e urutau pērā i ka whanake haere ngā tūmomo whakawehi.
  • Whakatūpato i te ngengeI tētahi atu ringa, ka taea e ngā tīma te taumaha rawa i te nui rawa o ngā whakatūpato kino.

Hei wikitoria i ēnei wero, whakakotahi CVSS he mea nui te mōhiotanga mō ngā tūmomo mōrearea i te wā tūturu. Mātaki mai i tā mātou kōrero i runga i Ngā ngoikoretanga mutunga kore, ngā parenga atamai ake i runga i a YouTube.

Me pēhea te whakapai ake a Xygeni i te Whakahaere Whakaraerae e hangai ana ki te CVSS #

Xygeni's Tātaritanga Hanganga Pūmanawa (SCA) otinga, wāhanga o te Open Source Security te tuku, e whakamahi ana i te Pūnaha Whakatau Whakaraeraetanga Noa. Ano, maramatanga he aha te CVSS Ka āwhina i ngā whakahaere ki te kimi, ki te whakatau i ngā kaupapa matua, me te whakatika i ngā ngoikoretanga i roto i ngā whakawhirinakitanga pūtake tuwhera.

Xygeni's SCA Ngā Whakapai Ake i te Otinga #

  • Aromatawai Mōrearea HihiriKa hono atu ki ngā mōhiohio mōrearea i te wā tūturu.
  • Te whakaiti i te Noise: Engari, ka tātari i ngā hua teka hei whakaatu i ngā tūmomo mōrearea tūturu.
  • Te Whakotahi Tino: Hei tāpiri, ka whakauruhia te kitenga ngoikoretanga ki roto CI/CD pipelineme

Hei whakarāpopototanga, mā te mōhio he aha te CVSS me te whakamahi i a Xygeni SCA otinga, ka taea e ngā whakahaere te whakapai ake i ā rātou tukanga whakahaere ngoikoretanga.

Tiakina ō Whakawhirinakitanga Pūtake Tuwhera me Xygeni #

Whakanuia te Pūnaha Whakatau Whakaraeraetanga Noa ki te noho i mua i nga whakaraeraetanga.
Tonoa he Whakaaturanga I Tēnei Rā! Tirohia te āhua o Xygeni SCA ka whakarei ake te otinga i tō whakahaere ngoikoretanga.

Ētahi Pātai Auau mō te CVSS #

He aha te CVSS i roto i te haumarutanga tukutuku?

Ko te Pūnaha Whakatau Whakaraeraetanga Noa, he standardhe tikanga motuhake e whakamahia ana hei aromatawai i te kaha o ngā ngoikoretanga pūmanawa. Ka āwhina i ngā whakahaere ki te whakatau i ngā kaupapa matua o ngā mahi whakatikatika.

He aha te tikanga o te kaute CVSS o te 9.8?

Ka hinga te kaute o te 9.8 i roto i te Critical te awhe (9.0–10.0), e tohu ana i tētahi ngoikoretanga nui me aro atu tonu.

Nā wai i whakawhanake te Pūnaha Whakatau Irakore Whānui?

I whakawhanakehia e te Te Huihuinga o ngā Rōpū Whakautu me te Haumarutanga o ngā Aituā (FIRST).

Tīmata Koreutu

Tīmata mō te kore utu.
Kāore he kāri nama e hiahiatia.

Tīmata mā te pāwhiri kotahi:

Ka tiakina haumarutia ēnei mōhiohio e ai ki te Ngā o te Ratonga a Kaupapahere tūmataiti

Whakaahuamata o te taupānga