This research paper will focus on issues and concerns with Patch Management. Wit

Question

This research paper will focus on issues and concerns with Patch Management. With the advent of many types of software and systems, patch management is major nightmare. Patching the system may cause the system to crash, and not patching it can leave it vulnerable to attacks. Please research the issues and concerns with patch management and provide your views on the topic. Please consider this at an enterprise level where the complexity is increased exponentially with the increase in the number of systems.

Explanation / Answer

PATCH:

A Patch is a software designed to update a computer program. This usually developed and distributed as a replacement for compiled code.And this is designed to fixing security vulnerabilities and some other bugs with patches, called bug fixes. And also, to improving the usability or performance. Also create problem fixing, that is some non-well designed patches creates new problems.

PATCH MANAGEMENT:

Patch Management, means system management, that is , it includes acquiring, testing, installing multiple patches to an administered computer system. Patch Management has the knowledge fo current available patches, what patches are suitable for particular systems, ensure the patches that are installed properly, testing the systems after installation, and documenting all associated procedures. some products are available to automation of management tasks, such are, PatchLink Update, GibraItar's Everguard. simply say, Patch management is the process of using the strategy of what appropriate patches should applied to which systems at specified time. nowadays, many IT companies have developed elaborate processes for patch management to the production, such that, OS software, database upgrade, firmware upgrade to hardware components.

Example:

Storage arrays and network switches

ISSUES AND CONCERNS WITH PATCH MANAGEMENT:

when undertaking patch , some of challenges the organization must solve. First of all, they should know the difference between a security patch and a non-security patch.

Security Patch:

It should fix a vulnerability that can be exploited.

Non-Security Patch:

It repairs a problem with a software program and does not impact security.

SOME OF COMMON PATCH MANAGEMENT PROBLEMS ARE:

1. Lack of Report Availability :

   Lack of detailed report access is a common problem with a lot of businesses. But this depends upon that the system type we are using.

2.Unexpected Patch Failures :

  Because of unwell designed with capability of patch management systems, fails to detect the events in advance which lead to patch failure. To overcome this, The enterprises can use latest patch management technologies. This can effectively identify the reason of patch failure.

3.Lack of mobile control, LAN, VPNs :

  Most of the patch management systems are designed for monitor the patching on internal servers. This limits their capability to monitor mobile devices and machines in a remote location which are outside of the company network.

4. Manual Patching :

Some enterprise can not have the latest patch management technologies. They use manual patching processes which requires widespread scripting in order to install device patches. This process consumes more time and create vulnerability to human error.

5. Problems meeting compliance requirements :

An effective patch management systems cause for additional costs for businesses of limited budgets. This can lead to hefty fines ifthe standards are not met.

MY POINT OF VIEW CONCLUSION:

Patch management is a critical aspect of protect the confidentiality, integrity, and availability of systems. It can be encompasses to be possible because the most of the systems that are patched within enterprise, the few of them only subject to compromise. Patch management should not be thought of as that much better that solves all security problems but simply says that it is a cornerstone to effective protection and routine maintenance.

By research, It shows that, there are some ways to decrease the risks of vulnerabilities.

example, Network firewalls, that can mask the vulnerabilities, rapid detection and response to explotation attempts can limit their spread in some cases, and redundant layers of protection can be applied.

But those techniques are not largely used nowadays as they should be, and they do not completely eliminate the need for patching systems.

Related Questions

Navigate

• Browse (All)
• Browse T
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.