• A network vulnerability is a weakness in a system,
technology, product or policy
• In today’s environment, several organizations track,
organize and test these vulnerabilities
• The US government has a contract with an organization
to track and publish network vulnerabilities
• Each vulnerability is given an ID and can be reviewed by
network security professionals over the Internet.
• The common vulnerability exposure (CVE) list also
publishes ways to prevent the vulnerability from being
attacked