Yintoni i-SCAP?
I-SCAP isichazizwi seNkqubo yokuThuthukiswa kokuThuthukiswa kokuKhuseleko. Injongo yalo kukusebenzisa umgangatho okhuselweyo okhuselekileyo kwimibutho engenayo okwangoku okanye enokusebenza okubuthathaka.
Ngamanye amagama, ivumela abaphathi bezokhuseleko ukuba bahlole iikhomputha, isofthiwe, kunye nezinye izixhobo ezisekelwe kwisiseko esinqunyiwe sokukhusela ukuqinisekisa ukuba ukucwangciswa kunye neeprogram ze- software ziphunyezwa kumgangatho othe wafaniswa ngawo.
I-National Vulnerability Database (i-NVD) yi-US repository ye-SCAP.
Qaphela: Olunye umgangatho wokhuseleko olufana ne-SCAP lubandakanya i-SACM (ukuThuthukiswa koKhuseleko kunye nokuHlola okuqhubekayo), iCC (iMigqaliselo evamile), i-SWID (i-Logistics Identification), kunye ne-FIPS (iMigangatho yokuPhathwa kweeNkqubo zoLwazi).
I-SCAP inezixhobo ezibini eziphambili
Kukho iinxalenye ezibalulekileyo kwiProtocol yokuThuthukiswa kokuThuthukiswa kokuKhuseleko:
Content SCAP
Iimodyuli zezinto ze-SCAP zifumaneka ngokukhululekileyo ngomxholo ophunyezwe yiSizwe soMgangatho weMigangatho kunye noThnoloji (NIST) kunye namaqabane alo oshishino. Iimodyuli zemixholo zenziwe "kwiimeko ezikhuselekileyo" ezivunyelwene yiNIST kunye nabalingani bayo be-SCAP.
Umzekelo uza kuba yi-Federal Desktop Core Configuration, eyona yokhuseleko olukhuselekile lwezinye iinguqulelo ze-Microsoft Windows . Umxholo usebenza njengesiseko sokuqhathaniswa kweenkqubo ezichithwa zixhobo ze-SCAP zokuskena.
Scanners SCAP
Iskena se-SCAP sixhobo esifanisa ikhompyutha ejoliswe kuyo okanye ukucwangciswa kwesicelo kunye / okanye iqela lokumelana nelo lokoqobo lwe-SCAP.
Isixhobo siya kuphawula nayiphina impazamo kwaye sivelise ingxelo. Ezinye iiskripthi ze-SCAP nazo zinako ukulungisa ikhompyutha ekujoliswe kuyo kwaye ziyihambise ngokulandelelana komgangatho osemgangathweni.
Kukho ezininzi iimpawu ze-SCAP zorhwebo kunye nezivulekileyo ezifumanekayo kuxhomekeke kwisetyenzo sendawo esifunelwe. Ezinye iiskripthi zenzelwe ukukhishwa kwinqanaba lomashishini kanti ezinye zenzelwe ukusetyenziswa kwePC.
Unokufumana uluhlu lwezixhobo ze-SCAP kwi-NVD. Eminye imizekelo yeemveliso ze-SCAP ziquka i-ThreatGuard, i-Tenable, i-Red Hat kunye ne-IBM BigFix.
Abathengisi beSofthiwe abafuna iimveliso zabo eziqinisekisiweyo njengokuba zihambelanayo ne-SCAP, banokuqhagamshelana ne-lab ya-NVLAP ye-SCAP yokuqinisekiswa kwelebhu.