Vulnerability management
PREVENTION, MONITORING AND MITIGATION
CrossControl continuously processes, assesses and identifies platform vulnerabilities, to prioritize and implement updates that protect systems from cyberattacks and data breaches.
This applies also to developed system software where a software bill of materials (SBOM) declares the inventory of components used to build a software application. The Common Vulnerabilities and Exposures (CVE) system provides a reference method for publicly known information-security vulnerabilities and exposures.
| SPECIFICATION | |
| Code audit report | Through reviews and inspection with static code analysis |
| Security auditing | Via Vigiles and Yocto CVE check |
| Vulnerability scanning | CVE scanning using Nessus and OpenVAS |
| SBOM | Software bill of materials via SPDX |