Vulnerability Reports Consolidation for Network Scanners

Abstract

Vulnerability scanning is one of the vital process conducted by many penetration testers and security consultants as to assess the security of an organizational network. However, when multiple vulnerability scanners are used, reports of varied sources have to be compiled via manual means. It is an uncomplicated but lengthy process, where vulnerabilities of different reports have to be examined thoroughly in order to assess them. Thus, this paper describes an approach of creating a report consolidation tool in order to merge similar vulnerabilities and to unify results of differing scanner.