Unit 2 Types Of Vulnerability Scans

is a database of known software vulnerabilities and exposures and how to mitigate them with

The goal is to establish what needs to be secured and at what cost. Second, asset identification activities create asset inventories that include all network devices and endpoints, such as servers and smartphones. Third, vulnerability assessments help identify weaknesses in everything from training policies to router configurations. Vulnerabilities can be fixed through reconfiguration, countermeasures and software patches.

Nessus which is an architecture and infrastructure used in cybersecurity serves as a home for where servers can be centrally connected for the purpose of scanning and remote access by clients that have being given admin rights. In using Nessus, one of the most interesting benefits is that Administrators can make use of NASL descriptions solely for detecting vulnerabilities in order to develop customized scans.

The use of Wireshark and Network Mapper (Nmap) vulnerability assessment tools will identify potential flaws in the Microsoft and Linux operating systems. In order for an attacker to breach into the computer system; the attacker needs to either be using the Wireshark or Nmap tool. First, a machine needs to selected by using a variety of techniques like port scanning and so forth. Once the targeted system has been identified, the tool is initated and the attacker can sweep through the entire network for weaknesses and open network ports.

A good penetration tester must be technically competent and methodical. In many situations, a test team is more appropriate than an individual tester. 2 Care must be taken in selecting, installing and configuring the platforms used to perform the testing. Although there are several commercial tools that can be used to perform penetration tests such as Internet Scanner® from Internet Security Systems3, free tools will be used throughout this testing. Kurtz and Prosise make an excellent point when they claim; “Running a commercial vulnerability scanner is penetration testing” is a myth. 4 There are several problems with simply running a vulnerability scanner and assuming that a complete penetration test has been performed. The first is that the vulnerability scanners are only as good as the person running them. As will be discussed latter in this paper, there is more to performing a penetration test than just finding

| involves the unauthorized probing to test a target computer’s configuration or evaluate its system defenses, or the unauthorized viewing and copying of data files.

Security monitoring of any IT infrastructure is one of the main aims of security professionals; to help avert any imminent security threats that might halt a company’s normal operation. The monitoring tools implemented should serve all or some of the IT security strategies such as risk acceptance, risk avoidance, risk sharing, and ultimately risk control. A typical Information Technology (IT) infrastructure has the seven domains that need to be adequately monitored from any risk using the following monitoring tools:

Application development and use has been changing for several years. The growth of software-as-a-service has created new challenges for security tools — challenges that legacy products are simply unable to meet. Relying on vulnerability scanners that used public databases of vulnerabilities can have disastrous consequences, but it was often necessary to do so. However, scanners cannot defend against a vulnerability that they cannot identify — and therein lies the problem.

In this test the pentester has no prior knowledge about the target system, extensive reconnaissance is needed as organization doesn’t provide any information about the system to be tested to the penetration tester, the penetration tester himself have to gather as much information about the target system or a network and perform the test.

In security analysis, we find the risk level, security flaws which can occur in the daily practice of the system. In the security analysis, the risk assessment is done. There is a test which is used to analyze the security which is known as penetration test of the security system. In this test the system is under fake attack, but conditions are likely to same as that could be in the real attack. Intensions behind this

3. Physical penetration test: to protect sensitive and confidential data strong security measures are applied. This is mainly used in the government bodies.All access points and physical network devices are tested for possibilities of any security breach.

** Network-based –It analyzed the flow of the packets that transferring in the network and can detect malicious packet even if the firewall fails to notice the activities.

The system proved itself to work very effectively, and now is being expanded. Rather than simply test for specific problems, it will be testing computers against a large list of known exploits. Any unpatched systems, whether infected or not, will not be allowed full network access. The hope is to raise diligence in patching software, and prevent future virus outbreaks. The implementation of these anti-attack measures requires the use of port scanning and traffic sniffing tools, and for tools to be effective in detecting a remote vulnerability, a decently large amount of detail regarding the vulnerability much be available.

To perform adaptive cyber-security analytics using a computer implemented method that includes receiving a report on a network activity, It works as follows, a scoring method is used wherein a score responsive to the network activity is calculated. The score indicates a likelihood of security breach. This score is validated and the scoring model is automatically updated, responsive to the results of the validation. If the score falls within a threshold value of a security violation rule, the network activity is reported as suspicious. This basically relates generally to cyber-security monitoring, and more particularly to monitoring incoming security events to determine if any activity is violating security rules.

Internet-wide scanning is an efficient technique used by researchers to study and measure the internet to discover new vulnerabilities and tracking the adoption of defensive mechanisms. The internet wide scanning is conducted using the existing high speed scanning tools such as ZMap ad Masscan, which have reduced the scanning time from several months to minutes.