HOW YOU WON’T BECOME A TOPIC ON HEADLINES

No one, no leader, wants their organization, their company to be the next topic on the internet in the privacy incident headline because a vulnerability has not been fixed. In our view, it is simpler for “informatics” to address the issue of vulnerability in order to prevent flamage. Before invaders take advantage of them.
WHAT IS THE BLOG ABOUT?

Data security, vulnerability management, prevention

Of course, this is easier said than done, as an average large company has up to thousands of assets and millions of vulnerabilities, and dozens of new ones are discovered every day. It is reassuring that less than two percent of the vulnerabilities are being actively exploited from the dark side. But even two percent of the millions of vulnerabilities are more than IT security and operation teams can handle. Therefore, a responsible company needs a solution that processes all the internal security data, analyzes it with billions of external data, and then tells you which vulnerabilities pose the greatest risk to the enterprise infrastructure. This solution comes from Cisco, it’s Kenna.VM.

INSTEAD OF TIME-CONSUMING SOLUTIONS: KENNA.VM

Applying Kenna Security you can deploy an easy-to-use system for the processing of IT infrastructure information and security data, that eliminates the need for IT professionals to analyze vulnerabilities in spreadsheets. With this solution, you no longer have to waste valuable time searching for individual vulnerabilities on the Internet to assess their severity. There is no need to waste resources on troubleshooting or remediation with inadequate methods. This is because the IT security team will finally be able to evaluate and rank vulnaribilities based on the real risks, and to carry out repairs, maintenance and possibly improvements in the light of these.

Kenna.VM is a scalable, cloud-based solution that provides the most up-to-date and accurate risk priority available, enabling IT security and operations teams to take a risk-based approach to managing vulnerabilities by prioritizing and proactively managing key vulnerabilities.

AND ONLY KENNA.VM IS ABLE TO SERVE IT?

We can’t say there aren’t competitors to the solution, but we did say that last year, in 2021, Kenna Security won the Cutting Edge in Vulnerabilty Management at the 9th Annual Global InfoSec Awards at #RSAC 2021. And it’s because of that, the solution combines 18+ threat and exploit intelligence feeds, 7+ billion managed vulnerabilities, global attack telemetry, and recovery intelligence to accurately track and measure real exploitation activity on the company’s global attack surface. Using predictive modeling technology, Kenna.VM can also accurately predict the future risk of vulnerabilities as they are discovered, allowing organizations to proactively manage risk.

HOW DOES KENNA SECURITY'S SOLUTION WORK?

This is a fairly complex solution, so it would be difficult to describe it all briefly, but we will try to gather the points that make it worthwhile for any medium and large business to consider using it.

KENNA.VM

Combines external and internal data in a single risk view

Using machine learning and data science, the Kenna solution processes and analyzes 18+ threat and exploitation intelligence feeds, more than 12.7 billion managed vulnerabilities, and company security data to provide an accurate picture of the company’s risks. By risk scoring & remediation intelligence, the IT security management can get information needed to make remediation decisions.

 

Brings together all data from the multi-vendor IT security environment

The Kenna solution is prepared for the fact that every IT environment is different. That’s why it has more than 55 pre-installed connectors for more than 30 manufacturers. This allows the solution to provide the widest possible overview of risks across in the entire security stock, from vulnerability checkers to SAST, DAST, SCA security testing tools, bug programs, and configuration management databases. If a connector doesn’t exist, Kenna Data Importer lets you create your own connector. A couple of popular connectivity options.

Checkmarx is a provider of state-of-theart application security solution.
Checkmarx
Expanse discovers and maintains a complete, outside-in view of all your digital assests on the Internet.
Expanse
Security teams use HackerOne to manage vulnerability disclosure and bug bounty programs. Receive critical vulnerabilities from ethical hackers and bug bounty programs.
HackerOne
Imperva Web Application Firewall (WAF) analyzes and inspects incoming requests to your applications and APIs and stops these attacks.
Imperva
McAfee Vulnerability Manager performs authenticated and unauthenticated checks, automatically updated 24/7 by McAfee Labs.
McAfee
Micro Focus Static Code Analyzer accurately tests the security of any third-party or internal applications across 16 different programming languages and detects more than 100 different types of security vulnerabilities
Micro Focus
The MS Defender for Endpoint TVM integration with Kenna.VM brings endpoint vulerability data found by TVM into Kenna.VM platform.
Microsoft
AppDefense App Verification Cloud uses Kenna vulnerability risk intelligence to provide risk-based management capabilities.
VMWare
Veracode provides automated static and dynamic application security testing software and remediation services.
Veracode

Presents the threat in detail

Gathering security data is just the first step. You also need to understand what attackers are doing, how they are doing it, and what tools they are using to exploit the vulnerabilities. That’s why Kenna collects and analyzes data from external threat and exploitation feeds, as well as a unique database of more than 7 billion managed vulnerabilities, to uncover what attackers are doing in real time.

 

Predicts and prevents exploits

The better the more data is analyzed. Kenna uses natural language processing, predictive modeling, and other data science techniques to assess, rank, and predict risks. With predictive modeling, Kenna can predict the vulnerability of new vulnerabilities with 94% accuracy. Natural language processing analyzes the elements of vulnerability and threat data that are in human-readable text. And other predictive technologies help build the Kenna risk score.

 

Creates a common language for setting risk priorities

Kenna’s intelligent risk score engine actually creates a “common language” for IT security and operations to assess vulnerabilities. The risk score factors in the number of instances of each vulnerability in your environment, their potential severity, and the assets that are threatened as a result of each vulnerability. Then displays a number between 0-1,000, with 0-330 being lowest risk, 331-660 in medium and 660-1,000 as high risk for the group of assets associated with that risk meter, or asset group.

 

Helps you identify the vulnerabilities that need to be fixed first

Kenna’s recovery intelligence, by determining risk scores, provides insight into which vulnerabilities pose the greatest risk to an organization. These are the vulnerabilities that decrease the most when scoring risk scores. Because vulnerabilities are ranked based on the smart risk score engine recommendation, for example, not just the number of devices involved, these recommendations increase efficiency across all vulnerabilities.

 

Prioritized, data-driven interventions and decisions

Nothing compares to a completely personalized security insight. Through customizable, access-controlled asset group management, Kenna provides a flexible and quantifiable picture of your organization’s risk situation. Managing and reporting vulnerabilities at the individual asset group level allows the IT team to confidently correct reliable, science-based information. Detailed, holistic reports and benchmarks help align the organization and enable management to make data-driven decisions about the use and development of security resources.

CONCLUSION

Kenna Security makes it extremely easy to continuously and thoroughly examine vulnerabilities in your enterprise infrastructure by comparing data from internal and countless external locations. It provides management with data-driven, intelligence-based information and suggestions to reduce the vulnerability of the organization. The point is to reduce the human resources and thus the expenditure associated with vulnerability management processes, to centralize up-to-date information, and to prevent and avoid the losses they cause.

ASK FOR A PROFESSIONAL CONSULTATION FROM OUR EXPERTS!

We help you with your infrastructure development decisions with expert advice. Our IT engineers have decades of experience waiting for your ideas. We guarantee that we only and exclusively recommend reliable, cutting-edge technologies. With our solution, you can also operate your IT infrastructure cost-effectively.

LEARN MORE

PROFESSIONAL BLOG

Meraki WiFi Facebook
NETWORK DEVELOPMENT

Facebook WiFi for HORECA use

The Facebook login function developed for the public WiFi network of hospitality companies has been available for 10 years, yet it’s used in few place. However, it can have many advantages in terms of business.

READ MORE »
HÁLÓZATBIZTONSÁG
NETWORK DEVELOPMENT

NETWORK: TECHNOLOGIES VS. NEEDS

You don’t have to look back far to see that serious changes are taking place in IT. Organizations are mostly reshaping the way they acquire and use software and infrastructure.

READ MORE »

BLOG / VLOG

Sign up and we’ll let you know when the next blog is out!

BLOG AJÁNLÓ