Class: Risu::Models::Report

Inherits:
ActiveRecord::Base
  • Object
show all
Defined in:
lib/risu/models/report.rb

Overview

Report Model

Class Attribute Summary collapse

Class Method Summary collapse

Class Attribute Details

.author ⇒ Object

Returns the value of attribute author.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def author
  @author
end

.classification ⇒ Object

Returns the value of attribute classification.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def classification
  @classification
end

.company ⇒ Object

Returns the value of attribute company.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def company
  @company
end

.extra ⇒ Object

Returns the value of attribute extra.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def extra
  @extra
end

.location ⇒ Object

Returns the value of attribute location.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def location
  @location
end

.network ⇒ Object

Returns the value of attribute network.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def network
  @network
end

.owner ⇒ Object

Returns the value of attribute owner.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def owner
  @owner
end

.title ⇒ Object

Returns the value of attribute title.



32
33
34
 
# File 'lib/risu/models/report.rb', line 32

def title
  @title
end

Class Method Details

.scan_date ⇒ Object 



37
38
39
 
# File 'lib/risu/models/report.rb', line 37

def scan_date
	Host.where("start IS NOT NULL").first[:start]
end

.scanner_nessus_ratings_text ⇒ Object 



44
45
46
47
48
49
 
# File 'lib/risu/models/report.rb', line 44

def scanner_nessus_ratings_text
	text = "The vulnerability scanner used by #{Report.company} rates the findings as follows: Critical, High, Medium, Low and Informational. Critical findings represent a security hole, this is the highest rating a risk can get.  These generally represent vulnerabilities that can lead to full system compromise due to missing security patches. Critical findings should be re-mediated first as they generally leave the network wide open. High findings are slightly less severe than Critical findings but the severity depends on the calculated CVSS base score. Medium findings are considered a security warning; these are not as severe as high but should be evaluated on a risk-by-risk basis. These are typically configuration errors that can lead to information disclosures such as usernames, passwords, and configuration settings. Low findings are identified as security notes; these provide information the scanner discovered during the scanning process. The information includes items such as hostname, domain name, and MAC address. Open Port findings represent the open ports on each system that the scanner found during the scan process. These should be evaluated against firewall settings to test the firewall configurations.\n\n"
	text << "After the scanner is complete, the scanner evaluates each finding and bases it on the Common Vulnerability Scoring System (CVSS) score assigned to each finding. Any findings with a CVSS base score of 10 are upgraded to a Critical finding. These represent vulnerabilities that are trivial to gain administrator access to the system, with little to no effort. For more information on the CVSS scoring system please visit: http://nvd.nist.gov/cvss.cfm.\n\n"

	return text
end