Vulnerability Analysis
The intent of the Vulnerability Analysis Knowledge Unit is to provide students with a thorough understanding of system vulnerabilities, to include what they are, how they can be found/identified, the different types of vulnerabilities, how to determine the root cause of a vulnerability, and how to mitigate their effect on an operational system.
Topics
- Definition of “vulnerability”
- Root causes of vulnerabilities
- Vulnerability mapping.
- System modeling techniques
- Propose and analyze countermeasures to mitigate vulnerabilities.
- Analyze the expected and actual effectiveness of proposed countermeasures
- Vulnerability characteristics and classification.
- Mitigation strategies
- Analyze the expected and actual effectiveness of proposed countermeasures.
Outcomes
- Apply tools and techniques for identifying vulnerabilities.
- Create and apply a vulnerability map of a system.
- Apply techniques to trace a vulnerability to its root cause.
- Propose and analyze countermeasures to mitigate vulnerabilities.
- Explain the circumstances under which a vulnerability must be disclosed.
- Apply tools and techniques for identifying vulnerabilities
- Tools and techniques for identifying vulnerabilities
- Propose and analyze countermeasures to mitigate vulnerabilities
KSA-T
Below are the Knowledge, Skills, Abilities and Tasks (KSA-T) identified as being required to perform this work role.
Learn More about the KAS-T's.
ID |
DESCRIPTION |
K0005 |
Knowledge of cyber threats and vulnerabilities. |
K0339 |
Knowledge of how to use network analysis tools to identify vulnerabilities. |
K0009 |
Knowledge of application vulnerabilities. |
K0343 |
Knowledge of root cause analysis techniques. |
K0297 |
Knowledge of countermeasure design for identified security risks. |
ID |
DESCRIPTION |
S0167 |
Skill in recognizing vulnerabilities in security systems. (e.g., vulnerability and compliance scanning). |
S0175 |
Skill in performing root cause analysis. |
S0012 |
Skill in conducting knowledge mapping (e.g., map of knowledge repositories). |
S0103 |
Skill in assessing the predictive power and subsequent generalizability of a model. |
S0160 |
Skill in the use of design modeling (e.g., unified modeling language). |
S0022 |
Skill in designing countermeasures to identified security risks. |
ID |
DESCRIPTION |
A0001 |
Ability to identify systemic security issues based on the analysis of vulnerability and configuration data. |
A0020 |
Ability to provide effective feedback to students for improving learning. |