--- title: "Network Infrastructure Security: how vulnerable is your network?" description: "More devices are connected to networks every day: large, complex networks are paving the way for more services and processes than we could have imagined" image: https://newsroom.kireygroup.com/hubfs/Network.png --- [kireygroup.com](https://www.kireygroup.com/) [![](https://newsroom.kireygroup.com/hubfs/item-2020-dicembre/logo-Blog-v2.svg)](https://newsroom.kireygroup.com/en/news) - [Ita](https://newsroom.kireygroup.com/news/network-infrastructure-security-how-vulnerable-is-your-network?hsLang=it) - Eng - [Esp](https://newsroom.kireygroup.com/es/news?hsLang=en) [Kireygroup.com](https://www.kireygroup.com/) # Get your daily dose of tech! ## We Shape Your Knowledge # [Welfare: from compliance to competitiveness, digital services and technologies are key to pension funds’ future](https://newsroom.kireygroup.com/en/news/welfare-digital-services-and-technologies-are-key-to-pension-funds-future?hsLang=en) By Michela Sertorio, Business Line Manager - BU Pension Funds atKirey. [Read more](https://newsroom.kireygroup.com/en/news/welfare-digital-services-and-technologies-are-key-to-pension-funds-future?hsLang=en) 9 MIN READ 26 October 2026 ### Latest News - [Welfare: from compliance to competitiveness, digital services and technologies are key to pension funds’ future](https://newsroom.kireygroup.com/en/news/welfare-digital-services-and-technologies-are-key-to-pension-funds-future?hsLang=en) - [Inference Costs: how to prevent AI agents from driving costs up exponentially](https://newsroom.kireygroup.com/en/news/inference-costs-how-to-prevent-ai-agents-from-driving-costs-up-exponentially?hsLang=en) - [Kirey Advisory at the ABI Lab workshop on Processes, Operations and Organization](https://newsroom.kireygroup.com/en/news/kirey-advisory-at-the-abi-lab-workshop-on-processes-operations-and-organization?hsLang=en) - [Kirey Strengthens Its SAP Presence: Mind The Value Achieves Reselling Partner Status](https://newsroom.kireygroup.com/en/news/kirey-strengthens-its-sap-presence-mind-the-value-achieves-reselling-partner-status?hsLang=en) - [The Dark Side of Multicloud: how to prevent workload placement from generating technical debt](https://newsroom.kireygroup.com/en/news/the-dark-side-of-multicloud-how-to-prevent-workload-placement-from-generating-technical-debt?hsLang=en) - [Shadow AI: 4 out of 5 employees use tools not governed by the company](https://newsroom.kireygroup.com/en/news/shadow-ai-4-out-of-5-employees-use-tools-not-governed-by-the-company?hsLang=en) 8 MIN READ 30 March 2022 - Share on: - - - # Network Infrastructure Security: how vulnerable is your network? #### Kirey [![](https://newsroom.kireygroup.com/hubfs/it.svg)](https://newsroom.kireygroup.com/news/network-infrastructure-security-how-vulnerable-is-your-network?hsLang=it)    [![](https://newsroom.kireygroup.com/hubfs/ES.svg)](https://newsroom.kireygroup.com/?hsLang=es) 8 MIN READ 30 March 2022 - Share on: - - - - [All](https://newsroom.kireygroup.com/news?hsLang=en) - Categories + - [Corporate](https://newsroom.kireygroup.com/en/news/tag/corporate) - [Cybersecurity](https://newsroom.kireygroup.com/en/news/tag/cybersecurity) - [Cloud](https://newsroom.kireygroup.com/en/news/tag/cloud) - [Data Value](https://newsroom.kireygroup.com/en/news/tag/data-value) - [Innovation](https://newsroom.kireygroup.com/en/news/tag/innovation) - [Artificial Intelligence](https://newsroom.kireygroup.com/en/news/tag/artificial-intelligence) - [Software Development](https://newsroom.kireygroup.com/en/news/tag/software-development) - [Corporate Social Responsibility](https://newsroom.kireygroup.com/en/news/tag/corporate-social-responsibility) - [Advisory](https://newsroom.kireygroup.com/en/news/tag/advisory) - [Welfare & Social Services](https://newsroom.kireygroup.com/en/news/tag/welfare-social-services) - [Press & PR](https://newsroom.kireygroup.com/en/news/tag/press) ### For the record, adding a firewall to your network is no longer enough to declare it secure. More devices are connected to networks every day, and large, complex networks are paving the way for more services and processes than we could have imagined. Because of this, the attack surface has grown rapidly, and so we must adapt. We must secure our systems against **dangers from all directions**, not just from the "outside." We must understand that "trusted" endpoints have privileged access to the infrastructure and that they may be compromised. As a result, to fight against a privileged attacker, we need to **harden the infrastructure**. While a perimeter security appliance is always beneficial, other factors such as authorized network access, segmentation, and secured infrastructure become just as critical as a solid traffic security strategy. [Kirey Group](https://kireygroup.com) and [IP Fabric](https://ipfabric.io/) aim to integrate network assurance capabilities to create a complete and reliable model of the network and to facilitate data sharing through integration and the use of APIs. ## CVEs One of the most important aspects of this is ensuring that the network's devices are not vulnerable to attack. The **Common Vulnerability and Exposure** (CVE) program is administered by the Mitre Corporation, which is funded by the US government. The goal of this program is to **find**, **define**, and **catalog** publicly revealed software and infrastructure vulnerabilities. Each vulnerability is given an identity, categorized, and reviewed before being added to the NIST-hosted central repository. The data in the repository can then be used by organizations to **analyze their risk**. Vendors typically make this information available to their support customers to aid with lifecycle management. Until recently, NIST allowed access to the National Vulnerability Database (NVD) in the form of a feed file to anyone who requested it. Since June 2020, the preferred option is to use a REST API call, which offers up a slew of possibilities! A single API call can provide you with a list of the CVEs related to a particular model in a family of vendor’s equipment running a specific code version.  ## Inventory IP Fabric's industry-leading discovery maps out your network hop-by-hop in automated snapshots on a schedule that you choose. Each point-in-time snapshot contains a complete representation of the network, including device inventory, code version, and other information. When you combine that model with the CVE database, you'll have all the information you need to identify which CVEs might impact your network architecture. ## Model Let’s take it a step further. The IP Fabric model also keeps account of the configurations that have been applied to devices, the network topology, and the hosts that are **connected** to a device at any given time. Once you've found the CVEs affecting devices in your environment, you may use the model's information to: - determine **whether a device is** **affected** by a specific CVE by checking if it is configured using the affected feature; - determine the **impact of upgrading** or replacing devices by visualizing their role in the topology; - enumerate the **impact of an issue** by counting the number of connected users on an affected switch or the APs connected to an affected device. ## APIs The **data** in the model we described above may be **easily extracted** from IP Fabric using its comprehensive REST API. The API call to get that data is straightforward. Create an API token, then submit a POST request to your IP Fabric server's API endpoint 'tables/inventory/devices' to retrieve inventory from the relevant snapshot.   For example:`` `curl "https://demoX.ipfabric.io/api/v1/tables/inventory/devices" -X POST -H "X-API-Token: XXXXXXXXXXXX" -d '{"columns":["hostname","vendor","family","version"],"snapshot":"$last"}'` You may then cycle through the list of devices returned and put together a request to search the NIST database, for example: `curl "http://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:::"` This produces a JSON data structure with a list of CVEs that apply to the device. A description of the CVE, the report's source, a **threat level categorization** in terms of effect and exploitability, and so on are all included for each CVE item. Use a script to perform the API request, and then analyze the list on your own to compare the effect of those CVEs to the role and status of the devices in IP Fabric's model. ## Example There is an example script in IP Fabric's **#CommunityFabric** on GitHub repo that makes these calls into IP Fabric and the NIST database for you. It makes use of a very basic API Client to keep the code readable and easy to change.  ## Kirey Group and IP Fabric: a winning partnership Building on the expertise that Kirey Group has developed in the field over the years, the **partnership** with IP Fabric aims to integrate network assurance capabilities that create a complete and reliable model of the network and facilitate data sharing through **integration** and the **use of APIs**, with all the other components of the Group's offerings such as **ticketing systems**, **governance**, **security** and more. Autonomously retrieving information from the field and integrating with the people performing the processes will allow optimization to be taken to the highest levels, achieving that goal we outlined at the beginning: gaining a deep understanding of the **relationship between all the various elements that make up the network and customer systems**. A compression that for Kirey Group will translate into the ability to support companies in an even more complete and timely way in the face of new growth and transformation projects. ## [👉](https://www.kireygroup.com/en/network-governance-system/)[Click here](https://www.kireygroup.com/en/network-governance-system/) [to learn more about our](https://www.kireygroup.com/en/network-governance-system/) [Network Governance System offering!](https://www.kireygroup.com/en/network-governance-system/)   --- Source of the article: [https://ipfabric.io/blog/network-infrastructure-security/](https://ipfabric.io/blog/network-infrastructure-security/) - [Previous post](https://newsroom.kireygroup.com/en/news/kirey-group-collaborates-with-supernovae-labs-to-accelerate-the-digital-technological-innovation-of-the-finance-sector?hsLang=en) - [Read all posts](https://newsroom.kireygroup.com/en/news?hsLang=en) - [Next post](https://newsroom.kireygroup.com/en/news/kirey-group-is-cisco-appdynamics-titan-partner?hsLang=en) ## Related posts: #### Explore - [Home](https://www.kireygroup.com/) - [Competencies](https://www.kireygroup.com/en/competencies) - [Industries](https://www.kireygroup.com/en/industries) - [About Us](https://www.kireygroup.com/en/about-us) - [Tech&Partners](https://www.kireygroup.com/en/tech-partners) - [Careers](https://www.kireygroup.com/en/careers) - [Contact](https://www.kireygroup.com/en/contact) - [Corporate Social Responsibility](https://www.kireygroup.com/en/corporate-social-responsibility) - [Advisory](https://www.kireyadvisory.com/en) #### Policy - [Quality](https://www.kireygroup.com/oven/media/PKG-COMP-AL14-Quality-Policy.pdf) - [Security](https://www.kireygroup.com/oven/media/PKG-CIS-LG02-Security-Policy.pdf) - [Gender Equality](https://www.kireygroup.com/oven/media/PKG-COMP-LG03-Politica-per-la-parita-di-Genere-v2.pdf) - [Service Management](https://www.kireygroup.com/oven/media/PKG-COMP-AL45-Politica-per-la-gestione-dei-servizi.pdf) - [Environment](https://www.kireygroup.com/oven/media/PKG-COMP-AL44-Politica-Ambientale-Kirey.pdf) - [Health, Safety & Wellbeing](https://www.kireygroup.com/oven/media/PKG-COMP-LG02-Policy-on-health-safety-and-well-being-in-the-work-environment.pdf) - [ESG](https://www.kireygroup.com/oven/media/Policy-ESG-ENG-v1.pdf) - [Info on Data Processing](https://www.kireygroup.com/en/information-on-data-processing) #### Certifications - [ISO 9001:2015](https://www.kireygroup.com/oven/media/KIREY-S-R-L-9001.pdf) - [ISO/IEC 27001:2022](https://www.kireygroup.com/oven/media/KIREY-S-R-L-27001.pdf) - [PDR 125](https://www.kireygroup.com/oven/media/PDR-125-2022.pdf) - [ISO/IEC 20000-1:2018](https://www.kireygroup.com/oven/media/ISOIEC-20000-12018-ENG.pdf) - [ISO 14001:2015](https://www.kireygroup.com/oven/media/ISO-14001-2015-ENG.pdf) - [ISO 45001:2018](https://www.kireygroup.com/oven/media/CERTIFICATO-ISO-45001-KIREY-ENG.pdf) - [ISO 22301:2019](https://www.kireygroup.com/oven/media/ISO-22301-2019-ENG.pdf) #### Info **Kirey Srl** [info@kireygroup.com](mailto:info@kireygroup.com) Viale Francesco Restelli, 5 20124 Milano [kirey@pec.it](mailto:kirey@pec.it) **PI/CF**: 06729880960 **REA**: MI 1910802 **Tel**: +39 02 78625200 Capitale sociale 1.089.620,00  [![Linkedin](https://newsroom.kireygroup.com/hs-fs/hubfs/Linkedin.png?width=20&name=Linkedin.png)](https://www.linkedin.com/company/kireygroup/)   - [Privacy Policy](https://www.kireygroup.com/oven/media/Kirey-Privacy-ENG-policy-art-13.pdf) - [Cookie Policy](https://www.kireygroup.com/oven/media/Kirey-Cookie-Policy-ENG-1.pdf) - [Terms and Conditions](https://www.kireygroup.com/oven/media/Kirey-Website-Terms-and-Conditions-1.pdf) [![KIREY LOGO](https://newsroom.kireygroup.com/hs-fs/hubfs/KIREY_LOGO_PAYOFF_RGB_POS.png?width=200&height=72&name=KIREY_LOGO_PAYOFF_RGB_POS.png)](https://www.kireygroup.com/) © Copyright 2026 by Kirey