Is your information security ecosystem consuming poisonous information and putting your enterprise at risk?

Information security practices and technology are rapidly evolving. Security specialists are tasked to stay up to date on the current trends and to examine and implement integrated defences that require intelligence from different information security solutions in an effort to confirm that information assets are properly protected. In today’s security ecosystems, the challenge becomes greater because systems are integrated to process more information at a rapid pace in an effort to effectively protect organisations from cybercrime. This paper explores how most vulnerability management (VM) solutions that are central to every enterprise’s information security program may contain a serious hidden flaw that could result in highly inaccurate conclusions and even higher levels of security risk exposure. The flaw present within VM solutions is related to the challenge of correlating hosts, as scanned at one point in time, to their correct counterparts, as scanned at a different point in time. This paper details the issue, consequences of inaccurate correlation and recommendations to overcome this problem.