Let us have a look at the importance of vulnerability assessment.
Yes, it is important for the security of the organization, but again, I would like to ask the question
why security researchers, bug bounty programs and broken windows are discovering and reporting new
vulnerabilities daily.
Now, these vulnerabilities are frequently caused by either coding errors or by missed configurations,
not coding.
Errors include the failure to check the user input, which allows the attackers to improperly access
the system, memory or data.
Well, you must be curious how this happened.
So we are going to see in the ethical hacking section now vulnerable to attack, which we had discussed
in the history of cyber security part.
If you remember, it was a massive ransomware attack affecting organizations around the globe and it
targeted the eternal blue vulnerability, which was first reported on April 14, 2017, before being
used in one attack in May 12.
So within a span of one month, almost all these organizations did have the time to patch.
Right.
But did they patch the vulnerability?
No.
And on May 12, the attack was carried out and hundreds and thousands of computers were compromised.
That is why our liberty assessment informs organizations on the weaknesses present in their environment.
It provides a way to detect and resolve the security problems, but ranking the vulnerabilities before
someone can exploit them.
So that is what I was seeing in the last lecture, is that the organizations hire experts, third party
experts, to identify the weaknesses for them so that a bad actor won't identify.
For organizations, you know, seeking to reduce their security risk of a liberty assessment is a good
place to start operating systems that their networks are there, the applications are there.
So these are scanned in order to identify the root of vulnerabilities which can be found out by different
ethical hackers and a team of security experts.
Again, it also helps in identifying the threats and weaknesses at the earliest.
As I said on May 12, the first one on April 14th, the first vulnerability that Eternal Blue was identified.
And after that, after almost a span of one month, the entire attack of one group was carried out.
So if those organizations were already patched over liberties after it was reported was saved from the
attack.
But those who didn't feel and therefore their systems got compromised.
Validity assessment does provide a thorough, inclusive assessment of hardware and software assets identifying
different vulnerabilities, and it provides to different risk score for each celebrity.
Now, a regular assessment program assists organizations with managing the risk in the face of an ever
evolving threat environment, identifying and scoring one liberty so that attackers do not catch the
organizations unprepared.
That is why we report of liberty.
Assessment is very important in the next lecture.
We are going to talk about the 10 steps of vulnerability assessment, which you need to keep in your
mind, because if anyone asks you during your interviews or, you know, if you are saying you have
done cybersecurity, you must understand the 10 basic steps of vulnerability assessment.
All right.
Keep the momentum going.
I will see you in the next lecture.