Integrated vulnerability management system for enterprise networks

The number of vulnerabilities in enterprise networks has greatly increased recently as seen from frequent vulnerability reports from organizations, such as Microsoft and the CERT. Researchers in a number of organizations are currently working to develop and deploy frameworks to comprehensively manage these network vulnerabilities. This paper examines the existing attempts to solve this problem and the gaps in the existing methodologies. The paper presents our proposed integrated vulnerability management (IVM) framework based on open software standards.