QualysGuard® KnowledgeBase is the largest and most up-to-date in the security industry. Qualys® R&D Vulnerability Labs provide daily updates to the QualysGuard KnowledgeBase at an average of 25 vulnerability signature updates per week. The discovery of new vulnerabilities and remedies are collected through internal research, commercial relationships and online sources. The QualysGuard KnowledgeBase is the largest and most up-to-date vulnerability signature database in the security industry according to CVE standards.
KNOWLEDGEBASE AT A GLANCE
|
Vulnerabilities That Count QualysGuard KnowledgeBase includes more than 5,500+ vulnerability signatures. Forty-five percent of the vulnerabilities tracked are designated the highest level of severity by their vendors in terms of potential destruction, complexity, and liability to customers' networks. Attacks that exploit vulnerabilities at these levels allow intruders to easily gain control of the host, which may lead to compromising security of the entire network. |
|
|
Signature Updates & Alerts As new threats emerge everyday, Qualys continuously updates the vulnerability KnowledgeBase and all the Internet and Intranet Scanners to ensure that scans are performed with latest vulnerability checks. The QualysGuard KnowledgeBase incorporates vulnerability signatures on the same day the vulnerability goes public, including an advisory to customers in the case of severe vulnerabilities. |
|
|
Industry Standard Qualys references the vulnerabilities in the QualysGuard KnowledgeBase to the CVE (Common Vulnerabilities and Exposures) standard, an index of publicly known information security vulnerabilities. The CVE index is the product of the collaborative efforts of the CVE Editorial Board, which is comprised of leading representatives from the information security community, and is maintained by the MITRE Corporation (www.cve.mitre.org). |
|
|
Verified Fixes Qualys R&D Labs independently verify the vendor-prescribed fix for each vulnerability before posting it in the QualysGuard KnowledgeBase. In addition to confirming that the vendor fix does correct the vulnerability, this testing also verifies that the fix does not harm the system or undo another previously implemented security fix. |
|
|
Accuracy and Reliability A unique benefit of the QualysGuard Web services platform is the ability to test every signature in the KnowledgeBase nightly to ensure consistent accuracy and quality. The result of this regular testing is a false positive rate of less than 0.003%. To understand how Qualys Technical Support manages false-positives, please click here. |
