Security Content Metadata Model with an Efficient Search Methodology For Real Time Monitoring...
summary
Proposes a compact metadata schema that extracts essential fields from SCAP/MAEC XML into key-value properties stored as JSON or XML, indexed in MongoDB and served via REST APIs for fast queries. Demonstrates live search for Adobe CVEs with CVSS > 8, links to OVAL checks, and a patch that fixes 48 vulnerabilities; CVE examples include a CVSS 10.0 and Heartbleed. Vulnerability feeds pull daily from NVD, OVAL defs update twice weekly, and the demo shows real-time detection plus automated remediation workflows.
AI-written summary · about
chapters (8)
- 0:00Start
- 1:25Roadmap
- 5:40Threat Intelligence
- 7:34Metadata Model Schema
- 8:05Metadata of CVE-2015-0310
- 10:01How to use metadata?
- 11:13Flow of Incidence Response
- 12:13Real Time Threat Monitoring using Security Content Metadata Model
related talks
31mValidating Vulnerability Analysis with Statistical Analysis of Metadata
36mSecurity Scanning - Past/Present/Future
26mEffective Software Supply Chain Monitoring
30mCPE Metadata: Know IT ALL
29mThe Quality Imperative for CVEs: The Need For Enhancing Vulnerability Reporting Standards
36mAll you wanted to know about sw vulnerabilities…but were too busy to look into
47mReal Time Vulnerability Alerting
40mOpen Source CVE Monitoring and Management: Cutting Through the Vulnerability Storm