Sussen is based on the Open Vulnerability and Assessment Language an is comprised of four main components:
· Interpreter - This library can analyze a system using OVAL definition files. It comes with documentation and a test suite. All the other components depend on it. This can also be used by application developers who wish to add this kind of functionality to their applications.
· Applet - A GNOME-based applet for your desktop. Allows users to easily scan their systems for vulnerabilities.
· Agent - A command line program for scanning a system
· Editor - A GNOME-based program for creating/editing OVAL definitions and tests

The interpreter takes a set of OVAL definitions and starts to collect configuration and characteristics information about the target system. These are non-destructive probes and are not running any exploit code.

After the data collection is complete it analyzes each OVAL definition and sees if the conditions were met on the target system. When the analysis is complete the results are presented to the user.

You can use the definitions included with Sussen, download some from the OVAL repository, obtain them from a vendor, create your own. It could be any or all of the above.

What's New in This Release: [ read full changelog ]

· Editor: Fixed crash if definitions were selected and list was empty
· Misc: Improved i18n support in agent,applet and editor
· Misc: Updated build to use po/LINGUAS
· Oval: Added support for OVAL 5.1 and 5.2
· Oval: Fixed error in handling of check attribute on tests
· Oval: Fixed regression in handling of definitions on wrong platform
· Xml: Updated Ubuntu definitions for USNs 413-1 to 424-1
· Xml: Updated Windows definitions from oval.mitre.org