Home

About SSCH

SSCH is a security checker with transition graph to trace the vulnerabilities up to its effects.
This tool clarifies the vulnerabilities which exist in the following software.

• Adobe Acrobat Reader
• Adobe Air
• Adobe Flash Player
• Apple iTunes
• Apple Safari
• Google Chrome
• Mozilla Firefox
• Mozilla Thunderbird
• Microsoft Excel
• Microsoft Excel Viewer
• Microsoft Internet Explorer
• Sun JRE

---

SSCH uses the following information.

• NVD (National Vulnerability Database)
• CWE (Common Weakness Enumeration)
• CAPEC (Common Attack Pattern Enumeration and Classification)

---

You need to install the following information on your computer.

• GraphViz

---

SSCH Perl script is using following modules.

• File::Basename
• HTTP::Request::Common;
• LWP::UserAgent
• XML::Simple
• XML::Parser
• XML::Parser::Expat
• XML::SAX
• Win32::Registry
• Data::Dumper
• GraphViz
• HTML::Template;

---

Usage

1. Unzip download file at arbitrary folder.
2. Open up a cmd.
3. Browse the folder which unzip files.
4. Type command 'ssch'.
5. SSCH output result to 'result' folder.

Usage: ssch.exe [NvdFeed]
NvdFeed :
m : modified
r : recent
y : one year

---

Result Report

SSCH will output report to "result/index.html".
Please open the file by your blowser.

---

Request for cooperation

We are collecting the information on installed software, in order to evaluate a tool.
Please send your information if you agree.