Cyberstudy
PDF p.332 In progress

Benchmarks

Open PDF at p.332 8 flashcards

Summary

PDF p.332

Vulnerability scans assess the configuration of security controls and application settings against established benchmarks. This helps identify necessary controls and misconfigurations, ensuring systems meet best practice standards.

In plain words

Supplementary — not from your PDF

Vulnerability and compliance scans compare systems against benchmark templates to find missing controls and misconfigurations, such as outdated antivirus or default passwords. SCAP lets scanners check a machine against a baseline. OVAL describes system security state and vulnerabilities in XML; XCCDF describes configuration checklists in XML. Compliance scans measure systems against frameworks for regulation or best practice.

Detailed explanation

PDF p.332

Vulnerability Scans

  • Purpose: Assess security controls and application settings.
  • Identify Issues: Lack of necessary controls or misconfigurations (e.g., outdated antivirus, default passwords).
  • Best Practices: Provided in templates listing controls and configuration settings.

Security Content Automation Protocol (SCAP)

  • Function: Allows scanners to determine if a computer meets a configuration baseline.
  • Components
    • Open Vulnerability and Assessment Language (OVAL): XML schema for describing system security state and querying vulnerability reports.
    • Extensible Configuration Checklist Description Format (XCCDF): XML schema for developing and auditing best practice configuration checklists and rules.

Compliance Scans

  • Purpose: Measure systems and configurations against best practice frameworks.
  • Necessity: For regulatory compliance or voluntary adherence to best practice standards.

Important terms

taken from the text above
Identify Issues
Lack of necessary controls or misconfigurations (e.g., outdated antivirus, default passwords).
Open Vulnerability and Assessment Language (OVAL)
XML schema for describing system security state and querying vulnerability reports.
Extensible Configuration Checklist Description Format (XCCDF)
XML schema for developing and auditing best practice configuration checklists and rules.
Necessity
For regulatory compliance or voluntary adherence to best practice standards.
SCAP Security Content Automation Protocol OVAL Open Vulnerability and Assessment Language

Examples & real-world scenarios

Supplementary — not from your PDF
  • An XCCDF checklist for a server baseline.
  • A compliance scan against a CIS benchmark.
  • An OVAL definition checking for a vulnerable version.

Scenario

An auditor needs evidence that all servers meet the company's hardening standard. A SCAP-based compliance scan produces a report showing which servers pass or fail each check.

Common mistakes

Supplementary — not from your PDF
  • Mixing up OVAL (system state and vulnerabilities) and XCCDF (configuration checklists).
  • Scanning once for an audit and never again.

Practical skills

Supplementary — not from your PDF
  • Explain what SCAP, OVAL and XCCDF each do.

What I should remember

Key Points PDF p.332
  • Vulnerability Scans
    • Purpose: Assess security controls and settings.
    • Identify Issues: Necessary controls, misconfigurations.
    • Best Practices: Templates with controls and settings.
  • SCAP
    • Function: Configuration baseline compliance.
    • Components: OVAL, XCCDF.
  • Compliance Scans
    • Purpose: Best practice framework adherence.
    • Necessity: Regulatory or voluntary compliance.