Vulnerability management of corporate information systems based on QUALYS solutions

DOI: 10.31673/2409-7292.2021.020708

Abstract

The article analyzes the problem of cybersecurity of corporate information systems and defines the purpose and objectives of their protection. The analysis of technology of management of vulnerabilities of corporate information systems is carried out. Methods and tools for managing vulnerabilities of corporate information systems based on the Qualys solution are studied. The purpose, main functions and composition of Qualys solution software are defined. A variant of managing corporate information system vulnerabilities based on the Qualys solution has been developed.

Keywords: Corporate information system, cybersecurity, vulnerability management, QUALYS solution, Qualys Cloud Agent, risk.

References
1. 2019 Verizon Data Breach Investigations Report [Електронний ресурс]: Verizon Communications – Электрон. дан. – Нью-Йорк, США – 2019 – Режим доступа: World Wide Web. – URL: https://www.nist.gov/system/files/documents/2019/10/16/1-2-dbir-widup.pdf
2. Cost of a Data Breach Report highlights [Електронний ресурс]: IBM – Электрон. дан. – Армонк, Нью-Йорк, США – 2020 – Режим доступа: World Wide Web. – URL: https://www.ibm.com/security/data-breach
3. Equifax to Pay $575 Million as Part of Settlement with FTC, CFPB, and States Related to 2017 Data Breach [Електронний ресурс]: Federal Trade Commission – Электрон. дан. – Вашингтон, США – 2017 – Режим доступа: World Wide Web. – URL: https://www.ftc.gov/news-events/press-releases/2019/07/equifax-pay-575-million-partsettlement-ftc-cfpb-states-related
4. The 20 CIS Controls & Resources [Електронний ресурс]: Center for Internet Security – Электрон. дан. – 2020 – Режим доступа: World Wide Web. – URL: https://www.cisecurity.org/controls/cis-controls-list/
5. Josh Zelonis and Trevor Lyness. The Forrester Wave: Vulnerability Risk Management – October 17, Q4, 2019
6. Qualys Reviews in Vulnerability Assessment [Електронний ресурс]: Gartner peer insights – Электрон. дан. – Стэмфорд, Коннектикут, США – 2020 – Режим доступа: World Wide Web. – URL: https://www.gartner.com/reviews/market/vulnerability-assessment/compare/qualys
7. Vulnerability Management For Dummies / Wolfgang Kandek;. — John Wiley & Sons, Ltd, 2015. – 80 p. – ISBN: 978-1-119-13150-2.