Cyberdefense/VulnWhisperer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Create cvss score from base and temporal

Browse Source
This commit is contained in:
pemontto
2019-04-15 13:32:31 +10:00
parent 603050e7b3
commit 275b89c94d
4 changed files with 81 additions and 80 deletions
Download Patch File Download Diff File Expand all files Collapse all files

54
vulnwhisp/frameworks/nessus.py
View File

@ -25,10 +25,10 @@ class NessusAPI(object):
EXPORT_HISTORY = EXPORT + '?history_id={history_id}'
# All column mappings should be lowercase
COLUMN_MAPPING = {
'cvss base score': 'cvss',
'cvss base score': 'cvss_base',
'cvss temporal score': 'cvss_temporal',
'cvss temporal vector': 'cvss_temporal_vector',
'cvss3 base score': 'cvss3',
'cvss3 base score': 'cvss3_base',
'cvss3 temporal score': 'cvss3_temporal',
'cvss3 temporal vector': 'cvss3_temporal_vector',
'fqdn': 'dns',
@ -188,64 +188,64 @@ class NessusAPI(object):
'None': 'US/Central'}
return time_map.get(tz, None)
def normalise(self, dataframe):
def normalise(self, df):
self.logger.debug('Normalising data')
self.map_fields(dataframe)
self.transform_values(dataframe)
return dataframe
df = self.map_fields(df)
df = self.transform_values(df)
return df
def map_fields(self, dataframe):
def map_fields(self, df):
self.logger.debug('Mapping fields')
# Any specific mappings here
if self.profile == 'tenable':
# Prefer CVSS Base Score over CVSS for tenable
self.logger.debug('Dropping redundant tenable fields')
dataframe.drop('CVSS', axis=1, inplace=True)
dataframe.drop('IP Address', axis=1, inplace=True)
df.drop('CVSS', axis=1, inplace=True)
df.drop('IP Address', axis=1, inplace=True)
# Map fields from COLUMN_MAPPING
fields = [x.lower() for x in dataframe.columns]
fields = [x.lower() for x in df.columns]
for field, replacement in self.COLUMN_MAPPING.iteritems():
if field in fields:
self.logger.debug('Renaming "{}" to "{}"'.format(field, replacement))
fields[fields.index(field)] = replacement
fields = [x.replace(' ', '_') for x in fields]
dataframe.columns = fields
return dataframe
df.columns = fields
return df
def transform_values(self, dataframe):
def transform_values(self, df):
self.logger.debug('Transforming values')
# upper/lowercase fields
self.logger.debug('Changing case of fields')
dataframe['cve'] = dataframe['cve'].str.upper()
dataframe['protocol'] = dataframe['protocol'].str.lower()
df['cve'] = df['cve'].str.upper()
df['protocol'] = df['protocol'].str.lower()
# Copy asset to IP
dataframe['ip'] = dataframe['asset']
df['ip'] = df['asset']
# Map risk to a SEVERITY MAPPING value
self.logger.debug('Mapping risk to severity number')
dataframe['risk_number'] = dataframe['risk'].str.lower()
dataframe['risk_number'].replace(self.SEVERITY_MAPPING, inplace=True)
df['risk_number'] = df['risk'].str.lower()
df['risk_number'].replace(self.SEVERITY_MAPPING, inplace=True)
if self.profile == 'tenable':
self.logger.debug('Combinging CVSS vectors for tenable')
# Combine CVSS vectors
dataframe['cvss_vector'] = (
dataframe[['cvss_vector', 'cvss_temporal_vector']]
df['cvss_vector'] = (
df[['cvss_vector', 'cvss_temporal_vector']]
.apply(lambda x: '{}/{}'.format(x[0], x[1]), axis=1)
.str.rstrip('/nan')
)
dataframe['cvss3_vector'] = (
dataframe[['cvss3_vector', 'cvss3_temporal_vector']]
df['cvss3_vector'] = (
df[['cvss3_vector', 'cvss3_temporal_vector']]
.apply(lambda x: '{}/{}'.format(x[0], x[1]), axis=1)
.str.rstrip('/nan')
)
# CVSS score = cvss_temporal if cvss_temporal else cvss_base
df['cvss'] = df['cvss_base']
df.loc[df['cvss_temporal'].notnull(), 'cvss'] = df['cvss_temporal']
dataframe.fillna('', inplace=True)
return dataframe
df.fillna('', inplace=True)
return df