Identifying Vulnerabilities Flashcards
Explain Identifying Vulnerabilities
systematic practice of spotting and categorizing weaknesses in a system, network, or application that could potentially be exploited
What is Vulnerability Scanning?
automated method of probing networks, systems and applications to discover potential vulnerabilities
What is Application Security?
used to safeguard our software from being manipulated during its lifecycle.
What is Static Analysis?
Used in application Security
going to be used to analyze an application source code without actually running or executing that source code.
What is a Dynamic Analysis?
Used in Application security
evaluates an application as it’s being run to determine if there are any vulnerabilities inside of that application.
What is Packaged Monitoring?
Used in application security
ensures that the libraries and components that your application depends on are secure and up to date.
What is Penetration Testing?
used to simulate a real world attack on a system to evaluate its security posture
Explain System Process and Audits
process that involves conducting a comprehensive review of your information systems, security policies and procedures.
What are the steps of System Process and Audits?
- Plan to track vulnerabilities and deploy fixes
- Test patches and updates in a controlled environment
- Implement patches across devices and applications
- Audit to verify effective patch implementation and check for post-implementation issues