Presentation is loading. Please wait.

Presentation is loading. Please wait.

Vulnerability Scanning at NU Robert Vance NUIT-Telecom & Network Services.

Published by Modified over 9 years ago

Similar presentations

Presentation on theme: "Vulnerability Scanning at NU Robert Vance NUIT-Telecom & Network Services."— Presentation transcript:

1 Vulnerability Scanning at NU Robert Vance NUIT-Telecom & Network Services

2 Outline Scanning Review Tool Discussion The NU Scanning Service Scanning Limitations Futures

3 Quick Scanning Overview What is scanning? –System Reconnaissance –Achieved via Observable Protocol and Application Characteristics –Port Scanning vs Vulnerablity Scanning Why is it done? –good: Detect and protect exposed systems –bad: No faster way to spread malware

4 The Tools Port Scanners –nmap http://www.insecure.org/nmap Vulnerability Scanners –Nessus http://www.nessus.org –NeWT http://www.tenablesecurity.com/ –Retina http://www.eeye.com/ –ISS http://www.iss.net

5 The Idea The fundamental idea behind vulnerability scanning is to identify and then fix system weaknesses before miscreants use those weaknesses against us.

6 Vulnerability Scanning Service Handpicked Nessus Plugins Loop through the NU Address Space Import failed Scan Results into NUSA or NetPass and Repeat

7 Scanning Limitations Firewalls Other Visibility Limitations False Positives Scanning only gets you so far...

8 Possible Futures On Demand Scanning Host Based Agents Stateful Firewalls Everywhere

Download ppt "Vulnerability Scanning at NU Robert Vance NUIT-Telecom & Network Services."

Similar presentations

3D Tool Examples Dave Breslin (@ Tenable Discussions Forum)

3D Tool Examples Dave Breslin Tenable Discussions Forum)
Nmap Experiment.

Nmap Experiment.
Penetration Testing & Countermeasures Paul Fong & Cai Yu CS691 5 May 2003.

Penetration Testing & Countermeasures Paul Fong & Cai Yu CS691 5 May 2003.
1 No Silver Bullet : Inherent Limitations of Computer Security Technologies Jeffrey W. Humphries Texas A&M University.

1 No Silver Bullet : Inherent Limitations of Computer Security Technologies Jeffrey W. Humphries Texas A&M University.
Computer Security Fundamentals by Chuck Easttom Chapter 4 Denial of Service Attacks.

Computer Security Fundamentals by Chuck Easttom Chapter 4 Denial of Service Attacks.
Vulnerability Analysis Borrowed from the CLICS group.

Vulnerability Analysis Borrowed from the CLICS group.
Honeypots Margaret Asami. What are honeypots ? an intrusion detection mechanism entices intruders to attack and eventually take over the system, while.

Honeypots Margaret Asami. What are honeypots ? an intrusion detection mechanism entices intruders to attack and eventually take over the system, while.
CSCI 530L Vulnerability Assessment. Process of identifying vulnerabilities that exist in a computer system Has many similarities to risk assessment Four.

CSCI 530L Vulnerability Assessment. Process of identifying vulnerabilities that exist in a computer system Has many similarities to risk assessment Four.
UNITS meeting September 30, 2004 Network Security Roger Safian

UNITS meeting September 30, 2004 Network Security Roger Safian
1 Colorado University Guest Lecture: Vulnerability Assessment Chris Triolo Spring 2007.

1 Colorado University Guest Lecture: Vulnerability Assessment Chris Triolo Spring 2007.
NetPass and Northwestern By Julian Y. Koh As told by Robert Vance NUIT-Telecom & Network Services.

NetPass and Northwestern By Julian Y. Koh As told by Robert Vance NUIT-Telecom & Network Services.
Northwestern University Information Technology UNITS Quarterly Meeting April 29, 2004 Network Security Roger Safian

Northwestern University Information Technology UNITS Quarterly Meeting April 29, 2004 Network Security Roger Safian
Security+ Guide to Network Security Fundamentals, Third Edition Chapter 9 Performing Vulnerability Assessments.

Security+ Guide to Network Security Fundamentals, Third Edition Chapter 9 Performing Vulnerability Assessments.
Department of Information Technology NUSA Overview Mike Rykowski IT-TNS.

Department of Information Technology NUSA Overview Mike Rykowski IT-TNS.
Greg Williams. IT Security Program  Objective is to maintain integrity of University systems  Minimum Security Standard.

Greg Williams. IT Security Program  Objective is to maintain integrity of University systems  Minimum Security Standard.
Computer Security and Penetration Testing

Computer Security and Penetration Testing
© 2012 IBM Corporation IBM Security Systems 1 © 2014 IBM Corporation IBM Security Network Protection (XGS) Advanced Threat Protection Integration Framework.

© 2012 IBM Corporation IBM Security Systems 1 © 2014 IBM Corporation IBM Security Network Protection (XGS) Advanced Threat Protection Integration Framework.
SELECTING AND IMPLEMENTING VULNERABILITY SCANNER FOR FUN AND PROFIT by Tim Jett and Mike Townes.

SELECTING AND IMPLEMENTING VULNERABILITY SCANNER FOR FUN AND PROFIT by Tim Jett and Mike Townes.
VULNERABILITY MANAGEMENT Moving Away from the Compliance Checkbox Towards Continuous Discovery.

VULNERABILITY MANAGEMENT Moving Away from the Compliance Checkbox Towards Continuous Discovery.
Vulnerability Types And How to Use Them.

Vulnerability Types And How to Use Them.

Similar presentations

Ads by Google