CSET

简介

cset_banner_noVersion
CSET(Cyber Security Evaluation Tool)是来自美国国土安全部的一个网络安全评估工具,该工具支持多个安全标准如NIST信息安全标准NIST SP800-53和工业控制系统安全标准NIST SP800-82,NERC CIP以及国防部DOD Instruction 8500.2等。软件主要根据当前所选择的标准,通过问答的方式给出评估报告以及合理建议,可以很好的用来学习安全标准和风险评估。

使用指南

目前CSET的最新版本为6.0,软件安装时对系统有如下要求

In order to execute CSET, the following minimum system hardware and software is required:
Pentium dual core 2.2 GHz processor (Intel x86 compatible)
CD-ROM drive if creating a physical CD
2 GB free disk space
3 GB of RAM
Microsoft Windows 7* or higher
Microsoft Office compatible (.doc or .docx) document reader
Microsoft Visio 2007 or 2010 is required if Visio is the preferred tool to create or revise the network diagram. Visio 2013 is not currently supported
Microsoft Excel is required to open the network diagram inventory list
A Portable Document Format (PDF) reader such as Adobe Reader is required to view supporting documentation such as the standards; the latest version of Adobe Reader may be downloaded free from http://www.adobe.com/products/
CSET installs the Microsoft .NET Framework 4.5 Full Runtime, if required.
*It is highly recommended that Windows be fully patched through Windows Update.

软件截图

CSET1
CSET2
CSET3
CSET4
CSET5
CSET6

官方链接

Download CSET here
Cyber Security Evaluation Tool (CSET) Fact Sheet
Cyber Resilience Review and CSET Fact Sheet

Leave a Reply

Your email address will not be published. Required fields are marked *

此站点使用Akismet来减少垃圾评论。了解我们如何处理您的评论数据

最新工业控制系统漏洞

ICS-CERT Advisory Feed
Delta Industrial Automation CNCSoft

This advisory includes mitigations for heap-based buffer overflow, out-of-bounds read, and stack-based buffer overflow vulnerabilities reported in Del. . . read more Tue, 16 Apr 2019 10:10:11 EDT

WAGO Series 750-88x and 750-87x

This advisory includes mitigations for a use of hard-coded credentials vulnerability reported in WAGO's 750-88x and 750-87x programmable logic co. . . read more Tue, 16 Apr 2019 10:05:55 EDT

PLC Cycle Time Influences

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in ABB, Phoenix Contact, Schneider Electric, Siemen. . . read more Tue, 16 Apr 2019 10:00:24 EDT

Siemens SIMOCODE pro V EIP

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in Siemens' SIMOCODE pro V EIP low-voltage mot. . . read more Tue, 09 Apr 2019 10:25:33 EDT

Siemens Spectrum Power 4.7

This advisory includes mitigations for a command injection vulnerability reported in Siemens' Spectrum Power 4.7 system.. . . read more Tue, 09 Apr 2019 10:20:24 EDT

Siemens Industrial Products with OPC UA

This advisory includes mitigations for an uncaught exception vulnerability in Siemens' Industrial Products using OPS UA communications protocol.. . . read more Tue, 09 Apr 2019 10:15:11 EDT

Siemens SINEMA Remote Connect

This advisory includes mitigations for incorrect calculation of buffer size, out-of-bounds read, stack-based buffer overflow, and improper handling of. . . read more Tue, 09 Apr 2019 10:10:11 EDT

Siemens RUGGEDCOM ROX II

This advisory includes mitigations for double free, out-of-bounds read, and uncontrolled resource consumption vulnerabilities reported in Siemens'. . . read more Tue, 09 Apr 2019 10:05:16 EDT

Siemens CP, SIAMTIC, SIMOCODE, SINAMICS, SITOP, and TIM

This advisory includes mitigations for an out-of-bounds read vulnerability reported in Siemens' CP, SIAMTIC, SIMOCODE, SINAMICS, SITOP, and TIM p. . . read more Tue, 09 Apr 2019 10:00:56 EDT

Omron CX-Programmer

This advisory includes mitigations for a use after free vulnerability reported in Omron's CX-Programmer PLC software.. . . read more Thu, 04 Apr 2019 10:15:11 EDT

Rockwell Automation Stratix 5400/5410/5700 and ArmorStratix 5700

This advisory includes mitigations for an uncontrolled resource consumption vulnerability reported in Rockwell Automation's Stratix and ArmorStra. . . read more Thu, 04 Apr 2019 10:10:11 EDT

Rockwell Automation Stratix 5400/5410/5700/8000/8300 and ArmorStratix 5700

This advisory includes mitigations for resource management errors and improper input validation vulnerabilities reported in Rockwell Automation's. . . read more Thu, 04 Apr 2019 10:05:19 EDT

Rockwell Automation Stratix 5950

This advisory includes mitigations for an improper input validation vulnerability reported in Rockwell Automation's Stratix 5950 security applian. . . read more Thu, 04 Apr 2019 10:00:23 EDT

Advantech WebAccess/SCADA

This advisory includes mitigations for command injection, stack-based buffer overflow, and improper access control vulnerabilities reported in Advante. . . read more Tue, 02 Apr 2019 10:00:11 EDT

Rockwell Automation PowerFlex 525 AC Drives

This advisory includes mitigations for a resource exhaustion vulnerability reported in Rockwell Automation's PowerFlex 525 AC drive.. . . read more Thu, 28 Mar 2019 10:00:11 EDT

Siemens SCALANCE X

This advisory includes mitigations for an expected behavior violation vulnerability reported in the Siemens SCALANCE X products.. . . read more Tue, 26 Mar 2019 10:15:18 EDT

PHOENIX CONTACT RAD-80211-XD

This advisory includes mitigations for a command injection vulnerability reported in Phoenix Contact's RAD-80211-XD WLAN wireless transceiver.. . . read more Tue, 26 Mar 2019 10:10:11 EDT

ENTTEC Lighting Controllers

This advisory includes mitigations for a missing authentication for critical function vulnerability reported in ENTTEC’s lighting controllers.. . . read more Tue, 26 Mar 2019 10:00:23 EDT

Medtronic Conexus Radio Frequency Telemetry Protocol

This medical advisory includes mitigations for improper access control and cleartext transmission of sensitive information vulnerabilities reported in. . . read more Thu, 21 Mar 2019 10:00:27 EDT

AVEVA InduSoft Web Studio and InTouch Edge HMI

This advisory includes mitigations for an uncontrolled search path element vulnerability in AVEVA's InduSoft Web Studio and InTouch Edge human ma. . . read more Tue, 19 Mar 2019 10:05:11 EDT