Usage Guide - Software

Categorization

Normalized data in Global AssetView (GAV) has software applications categorized based on an internally developed classification/ categorization system. The categorization, which gives the user an idea about the primary function of the product, has been derived from standard industry terms as well as other well-known industry classification systems.

It follows a two-level classification system – namely Level 1 Category and Level 2 Category

Level 1 Category: Major or broad category to which the software application belongs.

Level 2 Category: Subcategory, i.e. specific to the product's core function.

Examples:

a) McAfee Endpoint Security Platform → Security / Endpoint Protection → Level 1: Security, Level 2: Endpoint Protection

b) Oracle MySQL → Databases / RDBMS → Level 1: Databases, Level 2: RDBMS

Few other examples of categories:

Application Development / Framework

Security / Endpoint Management and Security

Application Development / Development Tool

Network Application / Internet Browser

Storage / Backup and Recovery etc.

There are currently 29 Level 1 categories and 149 Level 2 categories for classifying software applications. Qualys is continuously updating its taxonomy for classifying more diverse range of software products, so these numbers are subject to change.

Publisher

Developer/Publisher or current owner of the Software product. Example: Apple, Microsoft

Product

Name of the Software product.

Product Family

Name of the broader umbrella of products under which that software product is offered.

Example

"Microsoft Office 365" and "Microsoft Office Project" belongs to the Office family of products.

Edition

Determines if the software product belongs to any particular edition that is defined by the publisher

Example:

Adobe "Acrobat DC" is distributed under below two editions :

Professional

Standard

Market Version

Name, number or any value assigned to the major release of the product

Examples:

a) "Oracle 10g Client 10.2.1" - Market Version: 10g

b) "Adobe Acrobat 9 Pro 9.5.2"- Market Version: 9

c) "Visual Studio Community 2017 15.9.7" - Market Version: 2017

Version

Major and minor version of the product

Examples:

a) "Oracle 10g Client 10.2.1" - Version: 10.2

b) "Adobe Acrobat 9 Pro 9.5.2" - Version: 9.5

c) "Visual Studio Community 2017 15.9.7" - Version: 15.9

Update

Service pack number, update, maintenance release etc. of the product

Examples:

a) "Oracle 10g Client 10.2.1" - Update: 10.2.1

b) "Adobe Acrobat 9 Pro 9.5.2" - Update: 9.5.2

c) "Visual Studio Community 2017 15.9.7" - Update: 15.9.7

Architecture

Determines whether the software follows 32-Bit or 64-Bit architecture.

Component

Determines that software product is a either a Client or a Server. This field is populated depending upon whether the installed software follows client-server architecture or not.

Language

Sometimes the product may be using a specific language based on the region or end user preference. This field determines the language that particular installed software uses e.g. English (United States), English (United Kingdom), French, German, Chinese (Traditional) etc.

Release

Combination of publisher, product family , product, component, major release, version, update, edition, architecture of the installed software.

Example

"Microsoft Office Project Client 2013 15 SP1 Professional 64-Bit"

 In the above case → Publisher: Microsoft, Family: Office, Product: Project, Component: Client, Market Version: 2013, Version: 15, Update: SP1, Edition: Professional, Architecture: 64- Bit