Application Security

Question 1

What is the opensource tool Dynatrace uses to detect vulnerabilities?

Answer 1

Snyk

Question 2

What are the steps to get started with Dynatrace application security?

Answer 2

1. Check to see if there are enough Application Security Units (licenses)
2. Check permissions for the users
3. Activate by going to settings => Application Security => Enable runtime vulnerability analytics
4. Optionally add rules to include or exclude based on conditions.

Question 3

What is Dynatrace Security Score (DSS)?

Answer 3

DSS is based on CVSS but uses Davis and understanding of the environment to calculate a more accurate score from Modified Attack Vector (MAV), Modified Confidentiality (MC) and Modified Integrity (MI)

Question 4

What are the possible states of any third-party vulnerability in Dynatrace?

Answer 4

In Use: At least 1 process group calls a vulnerable function
Not in Use: Affected process group do NOT call any vulnerable function
Not available: Data is not available