Network Security Audit By David Liu University of Plymouth

Introduction  Increasing number of Internet connection  Low knowledge users  Existing security softwares give wrong feeling of security

Project’s objectives  To develop an audit program which can be manipulated by novices users  It should contain material security tests  It should make users understand the dangers of Internet.

Existing programs  Nessus  GFI Lan guard  Microsoft Baseline Security Analyser  ATK: Attack tool kit

Nessus

GLI Languard

MBSA

Innovations  No installation required  Online  Human behaviour  Easy to use  Simple and clear explanations

Audit tools  Port Scanner  Human behaviour: MCQ  Password tester  Antivirus analyser  Key logger

Survey and feedback  24 users answered the survey  7 novice users, 17 intermediary and experts  Most of the found this project contains relevant audit tools  They found it easier to use  Only 3 novice users had technical problems  A few people exploited explanation pages

Conclusion and perspectives  Bypass JAVA requirements  Multithreads port scan  Add more material audit tools  Make explanation pages more attractive

Thank you