HNGlance

Top Best New Show

Amazon Inspector (Preview)

http://aws.amazon.com/inspector/

by polmolea • 11 years ago

28 1 11 years ago

AW

Related Stories

Loading related stories...

Comments

1

rwmj• 11 years ago

I wonder if they're using OpenSCAP for this. It's an XML document that (at least) Red Hat and Microsoft publish which contains the lists of known good hashes for every file we publish, and also a set of rules for common vulnerabilities (things like "if a directory is public writable, flag an error" -- but lots of them, and more complex). Also CVE data is published in a machine-readable format.

Here's the data that Red Hat publishes: https://www.redhat.com/security/data/oval/

I'll pimp my own experiments scanning offline guests using SCAP:

https://rwmj.wordpress.com/2013/05/16/scanning-offline-guest...

Source preview

aws.amazon.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms