diff --git a/src/site/markdown/index.md b/src/site/markdown/index.md index f00c39659..b0acd8f8a 100644 --- a/src/site/markdown/index.md +++ b/src/site/markdown/index.md @@ -12,11 +12,10 @@ The gist of the paper is that we as a development community include third party libraries in our applications that contain well known published vulnerabilities \(such as those at the [National Vulnerability Database](http://web.nvd.nist.gov/view/vuln/search)\). -Dependency-check scans directories and files and if it contains an Analyzer that -can scan a particular file type then information from the file is collected. This -information is then used to identify the [Common Platform Enumeration](http://nvd.nist.gov/cpe.cfm) \(CPE\). If a -CPE is identified a listing of associated [Common Vulnerability and Exposure](http://cve.mitre.org/) \(CVE\) -entries are listed in a report. +More information about dependency-check can be found here: + +* (How does dependency-check work)[internals.html] +* (How to read the report)[thereport.html] **IMPORTANT NOTE**: Dependency-check automatically updates itself using the NVD Data Feeds hosted by NIST. **The initial download of the data may take fifteen minutes diff --git a/src/site/site.xml b/src/site/site.xml index 5831d72b3..3ad2fb0c2 100644 --- a/src/site/site.xml +++ b/src/site/site.xml @@ -72,6 +72,12 @@ Copyright (c) 2013 Jeremy Long. All Rights Reserved.