The National Information and Communication Security Report Technical Service Center of the Executive Yuan is currently promoting the Vulnerability Notification Mechanism (VANS) of the information system of government agencies，
By reporting the platform system to automatically compare the weaknesses of software assets to facilitate the execution of software asset inventory (CPE), and to master the potential weaknesses (CVE) of key information systems.
The WinNexus system collects the software list of all end-user computers in the unit and compiles it in the server. The software name is automatically converted into CPE format through the VANS system, and then uploaded to the technical service center for comparison.
After the comparison, the technical service center will notify the unit of the result. The software with weak software will be updated through the command task of the WinNexus system. With the use of packaging tools and system-related settings, one-click update can be achieved for all end users. update and standardize the user environment.
WinNexus VANS automatically downloads the database of relevant security checklists, security-related software defects, product names and impact indicators from the NVD (National Vulnerability Database) of NIST (National Institute of Standards and Technology).
And after downloading, it is automatically compared with the software asset list, and the defective software list and PC list are displayed. After the comparison, WinNexus VANS automatically generates a software update list, and then downloads the relevant required files from the Internet, and then encapsulates them.
Customers can set the update whitelist in advance. When WinNexus VANS uses the above software list, PC list and packaged file to automatically generate the software update schedule, it will exclude the PC and software combination listed in the update whitelist to maintain the system. Continuous availability.
WinNexus VANS software update schedule, the execution progress can be displayed on the web page during execution. After execution, update reports and whitelist reports can be generated.
