DVM Vulnerability Scanner

1. What Is Vulnerability Scanning (DVM)?

Vulnerability assessment is a comprehensive examination of systems, networks, and applications to uncover flaws or misconfigurations that attackers could exploit. Unlike a firewall, vulnerability scanning cannot block attacks directly, but it gives an organization a clear view of exactly where its risks lie. Studies indicate that as much as 90% of security attacks are launched through vulnerabilities, which makes vulnerability scanning an essential part of any security management program.

2. What Is DVM?

DVM was DragonSoft's founding product — an in-house developed Vulnerability Scanner (with a fully Chinese interface) that performs network security vulnerability assessments across different environments, offering two core functions: Security Scanning and Vulnerability Risk Management.

Imagine you're a burglar planning to break into a house — where would you start? Probably by checking the doors, windows, exterior walls, and roof for weak spots. Hackers work the same way, attacking a company through these obvious vulnerabilities first. DVM (DragonSoft Vulnerability Management) works like an X-ray machine, helping customers understand internal security threats and diagnose potential system vulnerabilities and security conditions — an indispensable tool for security and network administrators.

3. What's the Difference Between DVM and VANS?

The table below clearly illustrates the differences and positioning of DVM and VANS:

Product	DVM (Vulnerability Scanning)	VANS (Vulnerability Reporting Mechanism)
Product Positioning	Testing Tool	Management Platform
Core Function	Discover vulnerabilities	Manage assets and vulnerabilities
Target Audience	Enterprises, government agencies	Cybersecurity responsibility level Tier A, B, and C units
How It Works	Remote vulnerability scanning by IP address or host subnet	Installs an agent, inventories assets, and performs vulnerability matching and patching

In short, DVM is a scanning tool for 'discovering vulnerabilities,' while VANS is a management platform for 'managing vulnerabilities.'

4. DVM Features

Security Testing: Scan a single IP or network segment, or even import a plain text file with target IPs and credentials.
Scheduled Scanning: Administrators can set up scheduled scans for effective, recurring tracking, patch verification, and risk control.
Before/After Comparison: Compares the current scan against the previous one, letting administrators see the results of vulnerability remediation over time.
Brute-Force Testing: Uses a password dictionary to test password strength across multiple protocol services, checking for weak passwords.
Open Database Format: When migrating to new hardware, administrators can export and import the database themselves, reducing the risk of data loss.

5. DragonSoft DVM Product Advantages

Vulnerability Risk Rating: Provides low, medium, and high risk ratings to help users make better decisions and reduce the risk of attack.
Customizable Items: Users can flexibly add IP hosts to filter or customize port descriptions, adjusting the scan scope as needed.
Broad, Comprehensive Support: Supports a wide range of operating systems (Windows, Linux, Ubuntu, and more), databases, and servers for thorough scanning.
Complies with International Standards (CVE) and Regularly Updated Vulnerability Database: The database is regularly updated according to the CVE standard from the National Vulnerability Database (NVD), ensuring quick remediation of the latest vulnerabilities.
Visual Dashboard and Integrated Reporting: Consolidates analysis into charts and reports so management can see the full picture.
Built-in Software Asset Management: Also provides asset management functionality, reducing blind spots.

6. DVM FAQ

Q: Can DVM be reinstalled on a different host?

DVM's license is bound to a single host and tied to that host's network card address (MAC). If you need to switch hosts, please contact us.

Q: Do antivirus software and firewalls affect DVM?

Yes. Be sure to disable antivirus software before installing DVM to avoid an incomplete installation. Also, disable the firewall when scanning, and confirm the scanning host is on the same network segment to avoid inaccurate results.

Q: Can DVM detect account passwords on a Windows host?

DVM can perform password testing during a scan, but a password file must be provided and matched for the password to be recovered. Configuration steps:

1. Policy → NetBIOS Settings: (1) Set administrator privileges — scanning with administrator privileges is required to obtain host account information for password testing. (2) Set the account/password guessing method to "Attempt to Change Account Password." (3) Provide a password dictionary file — you can use DVM's default dictionary or add your own passwords. Dictionary file path: C:\Program Files\Dragonsoft\DVM\Dic\password.txt.