Real Time Vulnerability Analysis & Risk Prioritization using Zensar’s Risk Assessment Framework

Real Time Vulnerability Analysis & Risk Prioritization using Zensar’s Risk Assessment Framework

연구 분야: Strategies

학회: 2024 IEEE International Conference on Signal Processing, Informatics, Communication and Energy Systems (SPICES)

The identification of real security threats remains a formidable challenge across diverse organizational landscapes. Traditional approaches, such as Vulnerability Assessment and Penetration Testing (VAPT) conducted at regular intervals, often fall short in addressing emerging security threats, particularly Zero Day vulnerabilities. Moreover, the inherent limitations of the VAPT process can result in scenarios where applications appear vulnerable but are not necessarily exploitable. In response to these challenges, this literature proposes a novel framework dubbed ZenRAF (Zensar's Risk Assessment Framework). ZenRAF is designed to enable real-time identification of risks and facilitate their mitigation. Through the implementation of ZenRAF, authors have successfully analyzed risks and established a prioritization scheme for applying mitigations, focusing particularly on vulnerabilities that are exploitable. This framework offers a proactive security threat management approach, empowering organizations to effectively identify, assess, and mitigate risks promptly. By leveraging ZenRAF, organizations can enhance their security posture and safeguard against the evolving landscape of cyber threats.