International Group

Institute for Information Industry

February 9, 2008
 CVS Introduction
An intelligent security vulnerability assessment system which
can ：
– Perform network mapping and vulnerability scan
– Support distributed assessment architecture
• To deploy CVS Agents in different segment of target network
– Perform multiple agents’ assessment tasks
– Remotely collect agents’ scanning results by controller and generate
reports
Perimeter Security Assessment Critical Asset Security Assessment LAN Security Assessment

LAN

Critical Servers

CVS Agent
CVS Agent CVS Agent

Assessment
information

CVS
Controller
 Major Features
• Network configuration auto-
analysis
– Retrieve network topology
and ACL of target network
• Optimized Performance
– Optimizes task flow and
uses multi-thread to enhance
the performance
– Classified scanning scope
• Real-Time Assessment Control
– View the real-time progress
of scanning task
– Cancel the unresponsive/
time-consuming task at
anytime
 Policy Wizard
Assessment Policy Setting via Policy Wizard with multiple profiles.
 Agent Configuration
• Agent’s IP and port connecting service setting
• Target host’s IP setting
 Target Host Group
• Target Host Group Editor
 Network Configuration
•Use the default network setting and frequent communication ports
 Vulnerability Configuration
• Default setting
Vulnerability Configuration (Con.)
• Dynamically setting
– Select vulnerabilities from Category trees
– Update Scanning Database Automatically
– Synchronize the scanning database in all controlled agents
 Live Host List
Including asset value, OS type, services, found vulnerabilities, risk
value, etc.
Gateway/Firewall ACL Analyzer

Remind network administrator to

filter unused ports by modifying
Gateway/Firewall ACL configuration
Report Generation
Multiple Format
Report
•Graphical report
and detail list
• Support HTML,
XML, PDF format
Thank You