• DocumentCode
    3076118
  • Title

    The Research on a Patch Management System for Enterprise Vulnerability Update

  • Author

    Zhao, Duanyang ; Furnell, M. ; Al-Ayed, A.

  • Author_Institution
    Zhijiang Coll., Zhejiang Univ. of Technol., Hangzhou, China
  • Volume
    2
  • fYear
    2009
  • fDate
    10-11 July 2009
  • Firstpage
    250
  • Lastpage
    253
  • Abstract
    Because of virus and worms which make use of vulnerability of computer systems, computer software is getting in trouble increasingly. Although there are opportunities to defend these attacks at an earlier stage, people undergo several serious disturbances because many administrators and users didn´t realize the essentiality of the patch management. The paper designs and implements a patch management system for vulnerability precaution protection which can efficiently repair vulnerabilities of computer systems in time. Developing a vulnerability management system needs two steps: constructing a vulnerability analysis database and implementing vulnerability management system (VMS) application software. The vulnerability analysis database is constructed based on CVE, Microsoft and others to report vulnerabilities in standard result forms by updating newest information, and is organized to be suitable to the distributed enterprise network. The VMS suggested in this paper can provide fast and more accurate vulnerability repair and proper guidelines to corresponding vulnerabilities.
  • Keywords
    security of data; computer system vulnerability repair; distributed enterprise network; enterprise vulnerability update; patch management system; vulnerability analysis database and; vulnerability management system; vulnerability precaution protection; Application software; Computer worms; Data analysis; Distributed databases; Guidelines; Information analysis; Protection; Software development management; Software systems; Voice mail; Security Advisories; Security Patches; Vulnerability; Vulnerability Management System (VMS);
  • fLanguage
    English
  • Publisher
    ieee
  • Conference_Titel
    Information Engineering, 2009. ICIE '09. WASE International Conference on
  • Conference_Location
    Taiyuan, Chanxi
  • Print_ISBN
    978-0-7695-3679-8
  • Type

    conf

  • DOI
    10.1109/ICIE.2009.233
  • Filename
    5211409