Class: Risu::Parsers::Nessus::PostProcess::RiskScore

Inherits:
Base::PostProcessBase show all
Defined in:
lib/risu/parsers/nessus/postprocess/risk_score.rb

Instance Attribute Summary

Attributes inherited from Base::PostProcessBase

#info

Instance Method Summary collapse

Methods inherited from Base::PostProcessBase

#<=>, #==, #calculate_severity, #create_item, #create_plugin, #has_findings, #has_host_findings, inherited

Constructor Details

#initialize ⇒ RiskScore

Returns a new instance of RiskScore.



29
30
31
32
33
34
35
 
# File 'lib/risu/parsers/nessus/postprocess/risk_score.rb', line 29

def initialize
  @info =
  {
    :description => "RiskScore Calculator",
    :plugin_id => 0
  }            
end

Instance Method Details

#calculate_host_risk_score ⇒ Object 



76
77
78
79
80
81
82
83
84
85
86
87
88
89
 
# File 'lib/risu/parsers/nessus/postprocess/risk_score.rb', line 76

def calculate_host_risk_score
  Host.all.each do |host|
    risk_score = 0.0

    host.items.to_a.each do |item|
      risk_score = risk_score + item.risk_score
    end

    #@TODO weighting goes here

    host.risk_score = risk_score
    host.save
  end
end

#calculate_item_risk_score ⇒ Object

Calculates the RiskScore for a Item which is == to the Plugin’s RiskScore



40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
 
# File 'lib/risu/parsers/nessus/postprocess/risk_score.rb', line 40

def calculate_item_risk_score
  Item.all.each do |item|
    plugin = Plugin.where(:id => item.plugin_id).first

    risk_score = 0.0
    cvss_base_score = plugin.cvss_base_score.to_f || 1.0
    vuln_publication_date = plugin.vuln_publication_date

    vuln_pub_days = 1
    vuln_pub_days = (DateTime.now.to_date - vuln_publication_date.to_date).to_i if vuln_publication_date != nil

    exploitable = plugin.exploit_available
    exploitable_factor = 1

    if exploitable == "true"
      exploitable_factor = 0.6
    end

    risk_score = (cvss_base_score * vuln_pub_days * 0.8) * exploitable_factor

    item.risk_score = risk_score
    item.save
  end
end

#calculate_plugin_risk_score ⇒ Object 



66
67
68
69
70
71
72
73
 
# File 'lib/risu/parsers/nessus/postprocess/risk_score.rb', line 66

def calculate_plugin_risk_score
  Plugin.all.each do |plugin|
    items = Item.where(:plugin_id => plugin.id).to_a

    plugin.risk_score = items.first.risk_score * items.count
    plugin.save
  end
end

#run ⇒ Object 



92
93
94
95
96
 
# File 'lib/risu/parsers/nessus/postprocess/risk_score.rb', line 92

def run
  calculate_item_risk_score()
  calculate_plugin_risk_score()
  calculate_host_risk_score()
end