Network Modeling and Risk Assessment Integration Overview

This document outlines the integration of Skybox View with QualysGuard vulnerability management data, detailing the capabilities and benefits provided to customers. It describes how the integration generates a network model that incorporates vulnerability and network device information, allowing for in-depth analysis, including attack and access simulation. The document explains the continuous and automated vulnerability assessment process, where real-time updates of asset vulnerability data are made available to the Skybox View risk assessment engine. It details how risk metrics are determined based on the exposure of vulnerabilities to potential attackers, categorizing them into direct and indirect exposure. Additionally, the integration facilitates in-depth analysis of firewall rules and automates the auditing process, streamlining regulatory compliance with standards such as PCI and FISMA. The document emphasizes the transformation of raw configuration and security data into actionable business intelligence, enabling accurate risk assessments and prioritization of actions.