Discovery
A special type of vulnerability management process focuses on finding and eliminating zero-day weaknesses. This unknown vulnerability management lifecycle is a security and quality assurance process that aims to ensure the security and robustness of both in-house and third party software products by finding and fixing unknown (zero-day) vulnerabilities. The unknown vulnerability management process consists of four phases: analyze, test, report and mitigate.
- Analyze: this phase focuses on attack surface analysis
- Test: this phase focuses on fuzz testing the identified attack vectors
- Report: this phase focuses on reporting of the found issues to developers
- Mitigate: this phase looks at protective measures explained below
Read more about this topic: Zero-day Attack
Famous quotes containing the word discovery:
“He is not a true man of science who does not bring some sympathy to his studies, and expect to learn something by behavior as well as by application. It is childish to rest in the discovery of mere coincidences, or of partial and extraneous laws. The study of geometry is a petty and idle exercise of the mind, if it is applied to no larger system than the starry one.”
—Henry David Thoreau (1817–1862)
“We early arrive at the great discovery that there is one mind common to all individual men: that what is individual is less than what is universal ... that error, vice and disease have their seat in the superficial or individual nature.”
—Ralph Waldo Emerson (1803–1882)
“It was one of those evenings when men feel that truth, goodness and beauty are one. In the morning, when they commit their discovery to paper, when others read it written there, it looks wholly ridiculous.”
—Aldous Huxley (1894–1963)