Towards automated advanced vulnerability analysis The identification of vulnerabilities in IT infrastructures is a crucial problem in enhancing the security because many incidents resulted from already known vulnerabilities which could have been resolved. Thus the initial identification of vulnerabilities has to be used to directly resolve the related weaknesses and mitigate attack possibilities. The nature of vulnerability information requires a collection and normalization of the information prior to any utilization because the information is widely distributed in different sources with their unique formats. Therefore the comprehensive vulnerability model was defined and different sources have been integrated into one database. Furthermore different analytic approaches have been designed and implemented into the HPI VDB which directly benefit from the comprehensive vulnerability model and especially from the logical preconditions and postconditions. Firstly different approaches to detect vulnerabilities in both IT systems of average users and corporate networks of large companies are presented. Therefore the approaches mainly focus on the identification of all installed applications since it is a fundamental step in the detection. [...]