4 ms·
This is a great self-hosted solution! We built CyberSentinel (https://www.insurtechnix.com/ https://www.insurtechnix.com/) to solve two problems with this appr
by JohnCClarke 6y ago
This is a great self-hosted solution!
We built CyberSentinel (https://www.insurtechnix.com/ https://www.insurtechnix.com/) to solve two problems with this approach. Firstly the raw CVE feed is quite "noisy" so you need almost full NLP to get the best out. Secondly most organisations find it challenging to get an inventory of all their SW.
We also prioritize CVEs according to whether they have exploit code, and also whether they are targeted by exploit kits. There are only about 2 dozen CVEs at any time that are exploit kit targets, so patching just those gives a huge security ROI.
- waihtis 6y agoGreetings fellow LORCA alumni, you're solving a real problem but the website doesn't really tell that story as well as your comment. I also think SME's care very little of CVE prioritization whereas enterprise fights this problem day in, day out!
- JohnCClarke 6y agoAgree! It is hard to sell security to SMEs! Vitamins vs. pain-killers... We do have success with enterprise and our goal (hence the name) is to integrate with cyber-insurance.