He Kupu Whakataki ki te CVSS #
Ko te Pūnaha Whakatau Irakore Whānui (CVSS) he standardanga whakapūmau mō te aromatawai me te whakatau i te kaha o ngā ngoikoretanga pūmanawa. Ka tohaina e te CVSS he kaute tau i waenga i te 0.0 me te 10.0, ko ngā kaute teitei ake e tohu ana i ngā ngoikoretanga tino nui. Mā te mārama he aha te CVSS, ka taea e ngā whakahaere te whakatau i ngā kaupapa matua o ā rātou mahi whakatikatika. Hei tāpiri, ka whakaratohia e te Pūnaha Whakatau i ngā Whakaraeraetanga Whānui he tikanga aromatawai mōrearea ōrite. Nō reira, ka taea e ngā tīma haumarutanga te arotahi ki ngā tūmomo mōrearea tino nui, ka whakapai ake i te tūnga haumarutanga whānui.
Tautuhinga:
He aha te CVSS? #
Ko te Pūnaha Whakatau Irakore noa, i whakawhanakehia e te Forum of Incident Response and Security Teams (FIRST), e tuku ana i tētahi huarahi pūnaha hei ine i te kaha o te ngoikoretanga. Inaa, ka whakaratohia e te CVSS tētahi tikanga whakatau whānui e whakamahia whānuitia ana i roto i te haumarutanga tukutuku me te haumarutanga tono (AppSec). Heoi anō, mā te mōhio ki te CVSS ka āwhina i ngā tīma haumarutanga. standardaromatawai mōrearea. Nō reira, ka taea e ngā kaipupuri katoa te mārama ki te kaha me te pānga o ngā ngoikoretanga. Nō reira, mā te whakauru i te Pūnaha Whakatau Irakore Whānui ki roto i ngā mahi haumarutanga ka nui ake te māramatanga me te whai huatanga.
Te Mahi a te Pūnaha Whakatau Whakaraeraetanga Noa #
te CVSS ka arotake i ngā ngoikoretanga mā te whakamahi i ngā rōpū ine matua e toru. Ko ēnei rōpū ko:
1. Ngā Inenga Tūāpapa #
Koinei ngā āhuatanga taketake o tētahi ngoikoretanga. Ina koa, ko te CVSS kei roto i ēnei:
- Te Waehere Whakaeke (AV) – Me pēhea te whakamahi i te ngoikoretanga (hei tauira, whatunga, ā-rohe).
- Te Uauatanga o te Whakaeke (AC) – Te taumata uaua o te whakamahi.
- Ngā Mana Motuhake e Hiahiatia ana (PR) – Te taumata urunga e hiahiatia ana mō te whakamahi.
- Te Taunekeneke a te Kaiwhakamahi (UI) – Mehemea he mea tika kia mahi te kaiwhakamahi.
- Inenga Paanga – Te pānga ki Te Matatapu (C), Ngākau Pono (I), a Te Wātea (A).
2. Ngā Inenga Wā #
E whakaata ana ēnei i ngā āhuatanga e rerekē ana i roto i te wā. Hei tauira:
- Te Paunga o te Waehere Whakamahi – Te wātea o te waehere whakamahi.
- Taumata Whakaora – Mēnā kei te wātea ngā pāti, ngā whakaiti rānei.
- Pūrongo Whakapono – Te pono o te pūrongo ngoikoretanga.
3. Inenga Taiao #
Ka urutauhia e ēnei inenga te Kaute Tūāpapa ki te taiao motuhake o tētahi whakahaere. Hei tauira:
- Nga whakaritenga haumaru – Te hiranga o te noho muna, te pono, me te wātea.
- Ngā Inenga Pūtake Kua Whakarerekētia – Ngā whakarerekētanga e whakaata ana i te horopaki o te whakahaere.
He aha te hiranga o te CVSS #
māramatanga he aha te CVSS he mea nui mo CISNgā Kaiwhakahaere Matua (CIO), me ngā tohunga haumarutanga. Ina koa, he āwhina te Common Vulnerability Scoring System nā te mea:
- Ka Whakatairanga i ngā WhakaraeraetangaHeoi anō, mā tēnei ka whakarite kia arohia ngā take tino nui i te tuatahi.
- StandardTe Whakawhitiwhiti Kōrero: I etahi atu kupu, te Pūnaha Whakatau Whakaraeraetanga Noa e whakarato ana i tētahi reo whānui hei matapaki i te kaha o te ngoikoretanga.
- Tautoko i te Whakatutukitanga: Heoi anō, he maha ngā ture e whakahau ana kia whakamahia CVSS mo te whakahaere morearea.
- Ka whakapai ake i te kahaNō reira, mā te whakamahi, ka taea e ngā tīma haumarutanga te whakahaere i te tukanga whakahaere ngoikoretanga.
Nō reira, mā te whakauru i te CVSS ka āwhina i ngā whakahaere ki te whakahaere i te mōrearea kia whai hua ake, me te tohatoha rauemi ki te whakaaro nui.
Ngā Awhe Kaute CVSS #
CVSS ka taka ngā kaute ki ngā wāhanga e whā:
- Raina: 0.1 - 3.9
- pāpāho: 4.0 - 6.9
- Teitei: 7.0 - 8.9
- Aitene: 9.0 - 10.0
Heoi, e mohio ana he aha te CVSS ā, mā ēnei awhe kaute ka āwhina i ngā tīma ki te whakatau tika i ngā ngoikoretanga.
Ngā Wero o te Pūnaha Whakatau Whakaraerae Noa #
- Te kore o te HoropakiHei tauira, kāore ngā kaute CVSS e whakaata i ngā pānga pakihi motuhake i ngā wā katoa.
- Ngā Kaute Pūtake TūmauHei tāpiritanga, kāore pea ngā kaute e urutau pērā i ka whanake haere ngā tūmomo whakawehi.
- Whakatūpato i te ngengeI tētahi atu ringa, ka taea e ngā tīma te taumaha rawa i te nui rawa o ngā whakatūpato kino.
Hei wikitoria i ēnei wero, whakakotahi CVSS he mea nui te mōhiotanga mō ngā tūmomo mōrearea i te wā tūturu. Mātaki mai i tā mātou kōrero i runga i Ngā ngoikoretanga mutunga kore, ngā parenga atamai ake i runga i a YouTube.
Me pēhea te whakapai ake a Xygeni i te Whakahaere Whakaraerae e hangai ana ki te CVSS #
Xygeni's Tātaritanga Hanganga Pūmanawa (SCA) otinga, wāhanga o te Open Source Security te tuku, e whakamahi ana i te Pūnaha Whakatau Whakaraeraetanga Noa. Ano, maramatanga he aha te CVSS Ka āwhina i ngā whakahaere ki te kimi, ki te whakatau i ngā kaupapa matua, me te whakatika i ngā ngoikoretanga i roto i ngā whakawhirinakitanga pūtake tuwhera.
Xygeni's SCA Ngā Whakapai Ake i te Otinga #
- Aromatawai Mōrearea HihiriKa hono atu ki ngā mōhiohio mōrearea i te wā tūturu.
- Te whakaiti i te Noise: Engari, ka tātari i ngā hua teka hei whakaatu i ngā tūmomo mōrearea tūturu.
- Te Whakotahi Tino: Hei tāpiri, ka whakauruhia te kitenga ngoikoretanga ki roto CI/CD pipelineme
Hei whakarāpopototanga, mā te mōhio he aha te CVSS me te whakamahi i a Xygeni SCA otinga, ka taea e ngā whakahaere te whakapai ake i ā rātou tukanga whakahaere ngoikoretanga.
Tiakina ō Whakawhirinakitanga Pūtake Tuwhera me Xygeni #
Whakanuia te Pūnaha Whakatau Whakaraeraetanga Noa ki te noho i mua i nga whakaraeraetanga.
Tonoa he Whakaaturanga I Tēnei Rā! Tirohia te āhua o Xygeni SCA ka whakarei ake te otinga i tō whakahaere ngoikoretanga.

Ētahi Pātai Auau mō te CVSS #
Ko te Pūnaha Whakatau Whakaraeraetanga Noa, he standardhe tikanga motuhake e whakamahia ana hei aromatawai i te kaha o ngā ngoikoretanga pūmanawa. Ka āwhina i ngā whakahaere ki te whakatau i ngā kaupapa matua o ngā mahi whakatikatika.
Ka hinga te kaute o te 9.8 i roto i te Critical te awhe (9.0–10.0), e tohu ana i tētahi ngoikoretanga nui me aro atu tonu.
I whakawhanakehia e te Te Huihuinga o ngā Rōpū Whakautu me te Haumarutanga o ngā Aituā (FIRST).
