[ news_security_news ] Citadel's Hercules Compliant With CVE Initiative
SecurityProNews Staff Writer
2004-11-09
Insider Reports RSS Feed
Citadel Security Software's AVR solution, Hercules, has been certified as fully compliant and compatible with the Common Vulnerabilities and Exposures (CVE) Initiative.
Led by the MITRE Corporation, CVE promotes the use of standard names for security vulnerabilities and exposures to foster information sharing across security solutions. The Certificate of Compatibility was awarded to Citadel at the 2nd CVE Compatibility Award Ceremony during the Computer Security Institute (CSI) 31st Annual Computer Security Conference and Exhibition in Washington, D.C. Lawrence C. Hale, the Deputy Director of the National Cyber Security Division, U.S. Computer Emergency Readiness Team (CERT) at the Department of Homeland Security, presented the awards.
"The CVE Initiative brings consistency and interoperability to the security and computing community," said Kent Landfield, a CVE Editorial Board member since 1999 and Security Group Director for Citadel. "The CVE Compatibility Process is a formal evaluation of submitted information security products and services. The testing and certification process assures products meet the criteria set out by the CVE Initiative to prove they are CVE-compatible."
CVE is a community-wide effort to create a list of standardized names for vulnerabilities and other information security exposures. Being CVE-compatible means that an information security product or service uses CVE names in a way that allows it to cross-link with other repositories that also use CVE names, facilitating the exchange of vulnerability information and making it easier to share data in a vendor-independent manner.
"The CVE Initiative achieved a major milestone when more than 200 products and services were declared CVE-compatible or were in the process of being made compatible by 125 organizations from industry, government, and academia from around the world," said Bob Martin, CVE compatibility lead for MITRE. "Citadel's Hercules has met the strict CVE compatibility evaluation and testing requirements and is now fully CVE-compatible, demonstrating their commitment to an industry standard that benefits enterprise security requirements."
"Prior to this award ceremony, only 14 products or services from 10 organizations had achieved the final phase of MITRE's formal CVE Compatibility Process and become officially CVE-compatible," said Carl Banzhof, CTO of Citadel Security Software. "We are proud to be the first automated vulnerability remediation solution to meet the CVE compatibility requirements. By achieving full CVE compatibility for Hercules, our customers now have better vulnerability coverage, easier interoperability and enhanced security across the enterprise."
About the Author:
SecurityProNews is a daily online and email publication focusing on internet security issues.
More news_security_news Articles
Insider Reports RSS Feed
|
|