V-INT: Automated Vulnerability Intelligence and Risk Assessment

Technical Report · Mon Jul 21 04:00:00 EDT 2025

DOI:https://doi.org/10.2172/2584203· OSTI ID:2584203

The project team, including the University of Arkansas (UA) as the lead, the University of Arkansas at Little Rock (UALR), Network Perception (NP), and Bastazo, has successfully researched, developed, and demonstrated the V-INT toolset, and also integrated it into the commercial products of NP (i.e., NP-View) and Bastazo (i.e., Spartan). The end product is a cybersecurity software tool for energy utilities that can automatically assess the risks of software vulnerabilities in an organization’s assets considering the organization’s firewall policies. It allows security operators to identify the small portion of vulnerabilities that poses true threats to their system (i.e., those that are not protected by firewall policies) and prioritize the mitigation of these vulnerabilities to minimize risks. It also allows security operators to identify the vulnerability-induced attack paths under their organization’s firewall policy, providing effective decision supports for mitigating potential attacks.

• Research Organization: Univ. of Arkansas, Fayetteville, AR (United States); Univ. of Arkansas, Little Rock, AR (United States); Network Perception, Inc., Chicago, IL (United States); Bastazo, Inc., Bentonville, AR (United States); Vistra Corporation, Irving, TX (United States)
• Sponsoring Organization: USDOE
• DOE Contract Number: CR0000003
• OSTI ID: 2584203
• Report Number(s): DOE-UARK--0000003
• Country of Publication: United States
• Language: English

Related Subjects

97 MATHEMATICS AND COMPUTING