1 / 9

Inteco and NIST Cooperation

Inteco and NIST Cooperation. Peter Mell National Vulnerability Database Project Lead Senior Computer Scientist NIST Computer Security Division Tim Grance Manager, Systems and Network Security Group NIST Computer Security Division July 20, 2006.

Download Presentation

Inteco and NIST Cooperation

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript


  1. Inteco and NIST Cooperation Peter Mell National Vulnerability Database Project Lead Senior Computer Scientist NIST Computer Security Division Tim Grance Manager, Systems and Network Security Group NIST Computer Security Division July 20, 2006

  2. National Institute of Standards and Technology NIST’s mission is to develop and promote measurement, standards, and technology to enhance productivity, facilitate trade, and improve the quality of life. • 3,000 employees • 1,600 guest researchers

  3. Cryptography / E-Auth Cryptographic Standards and Applications Cryptographic Standards Toolkit E-Authentication Security Testing Cryptographic Module Validation Program 800-53A Validation Guideline Security Management and Guidance Industry and Federal Security Standards Security Management Guidelines Agency Program Reviews Security Technologies Security Checklists Technical Security Guidelines Government Smart Card Program Mobile Device Security Forensics Access Control and Authorization Management National Vulnerability Database Protocols & Services Intrusion Detection Wireless NIST Computer Security Division

  4. Overview of the National Vulnerability Database NVD is a comprehensive information technology vulnerability database that integrates all publicly available U.S. Government vulnerability resources and provides links to industry resources. • 18200 vulnerability summaries • 2.2 million hits per month • Adding 17 vulnerabilities each day

  5. NVD Export Capability • RSS Feed • Enables systems administrators and security operations personnel to keep updated on the latest vulnerabilities • XML Feed • Enables importation of NVD vulnerability information into third party products • Gives away the entire database • No licensing restrictions

  6. Concept of Operations List of all known vulnerabilities Vulnerability Analysis Vulnerability Translation No Cost License Free Vulnerability Data Feed Spanish English

More Related