S1. About This Page
Each source below has its own link (for example #nvd), which the footnotes in the platform and in reports point to. The attribution text is the wording each source's licence or terms ask for. Inclusion here does not imply that any source endorses Emberix. Providers that process customer information are listed separately on the Service Providers & External Data Sources page.
S2. Data Sources
NIST National Vulnerability Database (NVD)
Used for: Known vulnerabilities (CVEs) matched to network operating system versions, and the CVE catalog counts on the Coverage pages.
Licence: NVD Terms of Use
This product uses the NVD API but is not endorsed or certified by the NVD.
VERIS Community Database (VCDB)
Used for: The external industry reference beside a client's security rating: aggregate figures only, never the raw database.
Licence: CC BY-SA 4.0
Industry figures are derived from the VERIS Community Database (VCDB), https://github.com/vz-risk/VCDB, licensed under CC BY-SA 4.0. Emberix computes aggregate percentages from the published incident records; the figures are context only and do not affect any rating.
RouteViews
Used for: BGP announcements, origin networks and observed upstreams in the external attack surface Hosting section.
Licence: CC BY 4.0
This product utilizes data provided by RouteViews (www.routeviews.org). Use of this data is subject to the CC BY 4.0 license. With contributions from network operators and volunteers all over the world, RouteViews collects BGP data by direct peering at Internet Exchange Points (IXPs) or multi-hop peering. Data are archived and made publicly available for download at archive.routeviews.org, lg.routeviews.org, and api.routeviews.org.
RIPE NCC Routing Information Service (RIS)
Used for: BGP announcements, origin networks and observed upstreams in the external attack surface Hosting section.
Licence: RIPE NCC terms for RIS data
Routing data from the RIPE NCC Routing Information Service (https://www.ripe.net/ris). The RIPE Routing Information Service (RIS) is a RIPE NCC service. With the help of network operators all over the world, RIS employs a globally distributed set of Remote Route Collectors (RRCs), typically located at Internet Exchange Points, to collect and store Internet routing data. Volunteers peer with the RRCs using the BGP protocol and RIS stores the update and withdraw messages.
RIS data can be accessed via: RIPEstat, the "one-stop shop" for all available information about Internet number resources. RIPEstat uses individual widgets to display routing and other information; RIS Live, a real time BGP streaming API allowing server-side filtering of BGP messages by prefix or autonomous system; RIS Raw Data, available for each route collector, with state dumps and batches of updates made available periodically; RISwhois, that searches the latest RIS data for details of an IP address using a plaintext "whois"-style interface. It is useful when querying RIS data using scripts.
Regional Internet Registry delegation statistics
Used for: The registry country and allocation date of each public address in the Hosting section.
Licence: Published by each RIR for public use
Registry allocation data from the ARIN, RIPE NCC, APNIC, LACNIC and AFRINIC delegated-extended statistics files.
RPKI route origin validation
Used for: The RPKI state (valid, invalid or not found) of the announcement covering each public address in the Hosting section.
Licence: ARIN Relying Party Agreement and the other RIRs' RPKI terms
RPKI route origin validation by Emberix's own rpki-client over the AFRINIC, APNIC, ARIN, LACNIC and RIPE NCC trust anchors. Informational only: not for use in routing decisions.
Merit RADb Internet Routing Registry
Used for: Whether each announcement has a matching route object, in the Hosting section.
Licence: Merit RADb terms of use
Route objects from the Merit RADb Internet Routing Registry (www.radb.net), RADb source only.
iptoasn.com
Used for: The origin network (ASN), network name and ASN registration country of each public address in the Hosting section.
Licence: Public Domain Dedication and License (PDDL)
IP to ASN mapping from iptoasn.com, made available under the Public Domain Dedication and License.
GeoNames
Used for: The city list offered when setting a site's location.
Licence: CC BY 4.0
City data from GeoNames (www.geonames.org), licensed under CC BY 4.0.
eol.network
Used for: Hardware end-of-life and end-of-support dates. Each lifecycle finding and report row links to the eol.network page for its product.
Licence: eol.network terms of service
Hardware lifecycle data from eol.network. Each date cites its product page on eol.network.
S3. Artwork and Software
draw.io / diagrams.net Cisco stencils
Used for: The device icons on the Topology map.
Licence: CC BY 4.0
Icons based on artwork by JGraph Ltd (draw.io / diagrams.net), mxgraph.cisco19 "Generic" device shapes, licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/). Changes: the outer frame of each shape is removed and the glyph is recolored to follow the map's theme.
Mozilla PDF.js
Used for: The in-app report preview.
Licence: Apache License 2.0
PDF rendering by Mozilla PDF.js, licensed under the Apache License 2.0. The bundled standard font data includes Foxit fonts under a BSD-style license and Liberation Sans under the SIL Open Font License 1.1.
S4. Contact
Questions about an attribution, or a request from a rights holder, may be sent to [email protected].