Software asset analyzer: A system for detecting configuration anomalies
Xiao Li, Paul Avellino, Jeff Janies, M. Patrick Collins · 2016
In this paper, we introduce Software Asset Analyzer (SAA), a system that monitors and detects potentially vulnerable software asset modifications in end devices, and can be used to guide patch management. Software patching is a complex and failure-prone process that, on enterprise networks, requires triage. Accurate inventories of software (applications and operating systems) improve patching efficiency, which is a significant concern for security analysts. By generating asset baselines, the SAA identifies and reports abnormal deviations in individual end-devices, which allows security analysts to identify vulnerable devices and further enforce security patching. This system is also suited for detecting vulnerable software installs and remediation process verification. SAA is a low-cost and efficient method that yields accurate and complete inventories of assets on end-devices, reducing the potential loss from new vulnerabilities.