SecQua Files

SecQua
======
This project is an implementation of a new security metric for information systems.
The data that are being used are from the National Vulnerability Database (http://nvd.nist.gov), for latest exports you may visit http://nvd.nist.gov/download.cfm

Install
=======
For ubuntu users you should have installed MySQL
sudo apt-get install python python-mysqldb python-matplotlib python-scipy
To import the database, extract the file named nvd_mysql.sql.zip, open a terminal and go to the extracted file. Then type
mysql -u root -p <nvd_mysql.sql

RUN
===
From the folder you extracted the file run 'python seq_quant.py'
The program will now start and start asking what software you want to add to your IS. The supported software is listed in the file sw_list.txt
For example windows will try to find any vulnerabilities regarding to windows. To better quantify the security level, as the previous query will not only return results for Microsoft Windows, but for other software as well, refine the query e.g. windows_server_2008 or kernel:2.6. Moreover you may use SQL syntax e.g. kernel:2.6.[23][0123456789] in order to search for linux kernels from 2.6.20 and above. Leave blank and press <enter> to finish with IS software.
A figure displaying the security status over the period of one month will be shown and the calculated security level as well.