G1 |
Plugins |
The tool permits the integration of plugins |
G2 |
CTI Updates |
The tool informs the users about new vulnerabilities and CTI reports, indicating if the
tool developed some new activities related to testing security against them |
G3 |
Documentation |
The tool offers documentation accessible to the users |
G4 |
Interactive Tutorial |
The tool offers users an interactive tutorial explaining its usage and capabilities |
G5 |
General Vulnerability Score |
The tool quantitatively evaluates the overall system vulnerability based on all per-
formed simulations |
G6 |
General Risk Score |
The tool quantitatively evaluates the overall system risk level based on all performed
simulations |
G7 |
General Security Score |
The tool quantitatively evaluates the overall system security based on all performed
simulations |
G8 |
General Security Trend |
The tool provides an analysis of the system's security trends over time and across
simulations |
G9 |
Impact level |
The tool allows the user to manually specify the impact of attack activities on the
user's business |
G10 |
Targets Relevance |
The tool allows the user to specify each asset's relevance in the system manually |
G11 |
Tag Creation |
The tool allows the user to specify each asset's relevance in the system manually |
G12 |
Target Customization |
The tool allows the user to customize the system's targets |
G13 |
Manual Targets Grouping |
The tool permits the user to create and save groups of targets within the system |
G14 |
Automatic Targets Grouping |
The tool is capable of automatically creating groups of targets within the system |
G15 |
Compliance |
The tool is capable of validating compliance with one or more security standards |
G16 |
Standalone |
The BAS Tool can be bought or used as a standalone software without integrating
other functionalities |
G17 |
Automatic Mitigation |
The tool can apply mitigations for the discovered vulnerabilities |