Vulnerability Detection and Response, CVE and CWE Scanning, and More

Backdoors and other software security vulnerabilities represent an easy way for hackers and adversaries to gain access to an organization’s network or IT or OT systems. The MITRE CVE list and NIST NVD specify and provide guidance for many of these vulnerabilities, but they won’t identify all vulnerabilities for you or catch or remediate any of the issues. 

Advance beyond reactive patching programs that only address known common vulnerabilities and exposures (CVEs). Atomicorp offers vulnerability management that enables you to more efficiently address not only CVEs, but also MITRE common weakness enumeration (CWE) categories and other potential points of exposure, such as WontFix bugs and weak configurations that enable lateral attacks.

Vulnerability Detection and Management from Atomicorp

The vulnerability management capabilities in our Atomic OSSEC detection and response solution empower IT security teams to:

Benchmark and resolve against MITRE and NIST CVE databases.

Orchestrate CVE detection to identify and resolve known vulnerabilities across Linux, Windows, Linux, AIX, and additional operating systems and application environments. Be able to address backdoors and bugs in no longer supported software as well. Atomicorp vulnerability scanning extends to EOL operating systems going back to CentOS 5, Ubuntu 16-18, RHEL 5-6, and many EOL Windows and EOL mac OSs.

Address vulnerabilities as part of a more comprehensive CWE class-level resolution.

Move beyond point-to-point CVE detection and remedial action and strengthen entire categories of weaknesses including MITRE CWE’s most dangerous list. 

Respond via alerts, automation, active response, and a GUI for additional resolution.

CVE and NVD scanning and patching should be complemented with global threat intelligence, AV/antimalware, intrusion and malware detection, and active response systems that isolate compromised systems, remove malware, block intruders, and notify the security team. The Atomic OSSEC detection and response engine also includes a command line interface (CLI), API, SIEM, artifacting, and a visualization GUI and management and reporting console for analysts and security and compliance stakeholders. 

Assess various types of vulnerabilities according to severity and risk.

Prioritize vulnerabilities, in addition to known CVEs, with a coordinated and centralized approach that tackles threats and weaknesses. Pull vulnerable software assets aside and group them for remediation based on severity level and risk. 

Secure the unpatchable.

Unpatchable IT and software vulnerabilities include end of life (EOL) versions, insecure protocol versions, WontFix vendor policies, and yet-to-be-detected vulnerabilities. Not every vulnerability – especially human ones such as misconfiguration errors or gullible user actions leading to compromise – can be patched. In addition to performing end user training, identify vulnerabilities in your software and system behavior, EOL software included, and turn on advanced detection and response that mitigates social engineering exposure and stops lateral attacks as well. 

Schedule a Demo

Vulnerability Exploitation and Lateral Movement

Some of the biggest compromises have occurred through lateral movement. In the SolarWinds hack, hackers placed a backdoor in SolarWinds’ network monitoring software and from there were able to use admin access to gain control over systems in the software supply chain. This one-two punch is how many wide-reaching compromises have occurred.

Vulnerability Management and Defense in Depth Security

Atomicorp solutions combine vulnerability management and defense-in-depth security – i.e., layered defense that places multiple successive physical or logical barriers in the path of the adversary. Once inside your network, adversaries need to be able to perform reconnaissance, move laterally, escalate privilege, access data, and exfiltrate assets. The more obstacles for them, the better your ability to stop the spread and damage.

Atomic OSSEC provides layers of advanced security – including AV, vulnerability, intrusion prevention, malware memory analysis, malware isolation, real-time file integrity monitoring (FIM), and rapid response and recovery – across a variety of open source and commercial operating systems and applications. 

Get an Atomic OSSEC demonstration.

Advanced Linux OS Security Hardening

Check out how Atomicorp’s most active detection solution, Atomic Protector – formerly known as Atomic Secured Linux or Advanced Secured Linx – resolves vulnerabilities and thwarts lateral movement in Linux operating system (OS) environments. 

Get an Atomic Protector demonstration.

Atomicorp solutions can stop viruses and malware, web attacks, backdoors including web shells, escalating privileges, and other lateral attack methods.

Watch the video to see it in action.