Core Security Releases Core Insight 4.5 to Address Chronic Vulnerability Management Issues in the Enterprise
New Features in Core Security's Vulnerability Management Solution Include Interactive Attack Paths, Enhanced Exploit Matching and Filtering, Flexible Reporting and Smart Card Authentication
(firmenpresse) - BOSTON, MA and SAN FRANCISCO, CA -- (Marketwired) -- 04/21/15 -- ®, a leading provider of , today at RSA Conference 2015 announced the latest version of its vulnerability management solution, .
Core Insight solves the most significant problem plaguing today's enterprise vulnerability management teams: data overload. Ineffective prioritization and patching processes are highlighted by the 2015 HP Cyber Risk Report's finding that 44% of breaches are the result of vulnerabilities which are two to four years old.
Core Insight addresses this problem by consolidating, prioritizing and validating vulnerability management initiatives enterprise-wide. Normalizing multiple vulnerability scans across vendors, matching known exploits and simulating attacks enables users to focus remediation efforts on the most vulnerable points of their networks.
Tailored for complex environments with thousands of assets that change on a regular basis, Core Insight provides a single view of attack risk throughout the largest networks. Users can quickly model potential threat scenarios on the fly according to risk criteria that are most relevant to their business. This interactive view allows users to quickly modify attack path characteristics to see exactly how an attack could propagate across an organization's network. After high-risk attack paths have been identified and eliminated, users can immediately visualize and report on their improved risk state.
In order to efficiently consolidate and normalize massive amounts of vulnerability data while maintaining overall scalability and performance, Core Insight now leverages a centralized single-instance asset store for simpler data import, faster analytics, and flexible queries. Core Insight comes with pre-defined connectors to Vulnerability Assessment solutions from Tenable Nessus®, Tenable SecurityCenter®, Tripwire IP360™, McAfee® Vulnerability Manager, and Qualys® VM. Additional connectors and integrations are available through a highly extensible API. The results of the data import can be immediately sorted and filtered by vector type, IP, CVE, and server type, among other criteria. This enables organizations with many assets to consolidate and normalize this data in one location for analytics and reporting.
To further enhance the vulnerability prioritization capabilities of Core Insight, version 4.5 takes exploit matching to a new level. Users can now filter and prioritize imported vulnerabilities using more than 6.3 million data points found in the Vulnerability Context Catalog. This allows users to create customized threat scenarios representing potential business risk specific to their organization. The results from exploit matching and filtering can be shared in a report or viewed directly in Core Insight.
A flexible reporting engine facilitates granular filtering, grouping, and extensive configuration of large amounts of data. This engine allows users the choice of out-of-the-box reports or creating their own reports. Reports are easily customized (branding, pivot tables, visual charts, etc.) through Microsoft Excel templates. After configuring the Excel templates, the report can be shared as a PDF file or imported into Core Insight for future usage. This flexibility makes it easier to share data with co-workers, management and other constituents.
Core Insight now supports digital certificate authentication through web browsers and smart cards. Smart cards (known as Common Access Cards in the public sector) are used on a daily basis by private organizations and federal agencies alike, providing an added layer of security with embedded certificates when accessing sensitive data. Users that are required to use a smart card can now gain secure access to Core Insight simply by inserting the card, connecting to Core Insight via a browser, accepting the browser certificate and entering the related authentication PIN. No additional coding or customization is required.
Core Insight recently received several industry recognitions. In March, the solution earned a perfect five-star rating in the . In November, Core Insight won Information Security Magazine and SearchSecurity.com , coming out on top in the "Best Vulnerability Management Products" category. In October, the South Carolina Department of Health and Human Services received a from CSO Magazine for its work with Core Insight.
provides the industry's first comprehensive attack intelligence platform offering advanced analytics to prioritize, validate and ultimately eliminate security threats. With Core Security, enterprises and security professionals focus on the most likely threats to their business by modeling, simulating and testing the actions of an actual attacker. Core Security helps more than 1,000 customers worldwide identify the most vulnerable areas of their IT environments in order to improve their remediation efforts and better secure their business. The company's patented, proven, award-winning enterprise products and solutions are backed by more than 15 years of applied expertise from CoreLabs research and Core Security Consulting Services.
Katie Ledoux
Communications Manager
Core Security
617-695-1116
Themen in dieser Pressemitteilung:
Unternehmensinformation / Kurzprofil:
Datum: 21.04.2015 - 13:00 Uhr
Sprache: Deutsch
News-ID 387253
Anzahl Zeichen: 0
contact information:
Town:
BOSTON, MA and SAN FRANCISCO, CA
Kategorie:
Hardware
Diese Pressemitteilung wurde bisher 198 mal aufgerufen.
Die Pressemitteilung mit dem Titel:
"Core Security Releases Core Insight 4.5 to Address Chronic Vulnerability Management Issues in the Enterprise"
steht unter der journalistisch-redaktionellen Verantwortung von
Core Security (Nachricht senden)
Beachten Sie bitte die weiteren Informationen zum Haftungsauschluß (gemäß TMG - TeleMedianGesetz) und dem Datenschutz (gemäß der DSGVO).
