Module 5: Vulnerability Analysis

Section 1: Vulnerability Assessment

Vulnerability assessment is the process of identifying, quantifying, and prioritizing vulnerabilities in a system.

Steps

1. Scoping: Define what to scan and when
2. Discovery: Identify assets and endpoints
3. Classification: Categorize vulnerabilities by severity
4. Prioritization: Rank by risk level

Tools

• Nessus: Commercial vulnerability scanner
• OpenVAS: Open-source vulnerability scanner
• Nmap: Network discovery and port scanning
• Qualys: Cloud-based vulnerability management