Welcome back, everyone.
This is Rodney, and this is the section about vulnerability you will be learning about what I one abilities
and therefore the action will be taking a use case as well.
Let's get started.
It's basically a weakness.
It's a weakness into either hardware or software.
It in case of software.
We also name it as a bug.
Right.
We use it every now and then.
So 100 is nothing but a bug that weakness into the system as well.
Now, understand this.
This is made used by an attacker.
If if your system if your system either are software and hardware, has a bug or has a vulnerability,
this can be exploited by an attacker.
This can be used by an attacker to perform any malicious activity.
And that's what attackers are always after.
So understand this thing.
It's not just the software and hardware has the weaknesses or vulnerability.
Even humans has the vulnerability as well.
That's why you might have encounter that.
If you even get compromised, it's it's become easier to compromise the machine.
Right.
And that's what it is.
So one liberty is simply a weakness into the system.
OK, and the every vulnerability is has has is assigned with a unique number, and that's called C E.
And this is assigned by an organization and community organization called Mitre and listed and seamy
details dot com.
Now understand this.
Why do assign a one everybody.
Because wherever the vulnerability could exist, technically the vulnerability could exist in the software
or the hardware.
So who should report the software companies or the hardware company?
Right.
So for example, you might have routers.
These are hardware strike and then get router building or maybe Cisco routers, anything.
Right.
It occurs on all the stuff.
On the software side, you have Microsoft Docs, Excel, Adobe PDF and many more.
Right.
Even the Web applications as well.
Now, if they have any sort of bugs, they encountered the themselves.
They should report it to somebody so that they should report it online so that they can announce.
OK, yeah, we have found something and we are fixing it right before somebody can make use of it and
compromise network.
It is a great practice by any organization to proactively do the security testing and try to find out
a weakness into their own system.
Right.
So how it is defined, as I just told you, this is defined by the military.
This is the organization part of this as well.
So basically, as for the NSA, the definition is, of course, it's a weakness in the information system,
and that's how they define the weakness in the information system.
The same system, security procedures, internal controls or implementation that could be exploited
or triggered by an alternate source.
But that's a pretty long definition.
But that's how the Naess define it.
Of course, the different organization has a different way of defining it is.
So then there's the multiple definitions given by these Issaka as well.
So if you want to go deep about get to the article definition of it, you can go to their Web site and
get the definition of one liberty as well.
Simply, you can search for their way of defining vulnerability.
OK, so understand this way.
Vulnerability is always be defined based on CVT and that has that is defined with a specific number
which carries a year as well.
And the number.
OK, we'll talk about in the four decision where I'll talk about how to get more in detail about finding
out the specifics of it.
This was just the introduction to it.
Thank you.