Security vulnerability test: Vulnerability scanning
Describe the test and purpose of the test.
Vulnerability scanning is a security technique to identify security weaknesses in a computer system.
The purpose of Vulnerability scanning is to check whether there is an error or a problems within the security. Such as if a hacker can hack a system or not.
Discuss how it works.
A vulnerability scan detect and classifies system weakness in computers, network and communications equipment and predicts the effectiveness of countermeasures.
A vulnerability scanner runs from the end point of the person inspecting the attack surface in question. The software compares details about the target attack surface to a database of information about known security holes in services and ports, anomalies in packet construction, and potential paths to exploitable programs or scripts. The scanner software attempts to exploit each vulnerability that is discovered.
Provide example of the test.
By using Nessus Professional
Discuss the solution if there is vulnerability after a test.
If there is a problems after using vulnerability scanning, the best way to approach this is that to find out the problem itself or update the vulnerability tools being used (???)
Produce an audit document showing the range of tests in IT systems and networks ( Example WANs/LANs and wireless network).
Reference:
Vulnerability scanning is a security technique to identify security weaknesses in a computer system.
The purpose of Vulnerability scanning is to check whether there is an error or a problems within the security. Such as if a hacker can hack a system or not.
Discuss how it works.
A vulnerability scan detect and classifies system weakness in computers, network and communications equipment and predicts the effectiveness of countermeasures.
A vulnerability scanner runs from the end point of the person inspecting the attack surface in question. The software compares details about the target attack surface to a database of information about known security holes in services and ports, anomalies in packet construction, and potential paths to exploitable programs or scripts. The scanner software attempts to exploit each vulnerability that is discovered.
Provide example of the test.
By using Nessus Professional
Discuss the solution if there is vulnerability after a test.
If there is a problems after using vulnerability scanning, the best way to approach this is that to find out the problem itself or update the vulnerability tools being used (???)
Produce an audit document showing the range of tests in IT systems and networks ( Example WANs/LANs and wireless network).
Reference:
Techopedia.com. (2019). What is Vulnerability Scanning? - Definition from Techopedia. [online] Available at: https://www.techopedia.com/definition/4160/vulnerability-scanning [Accessed 25 Apr. 2019].
SearchSecurity. (2019). What is network vulnerability scanning? - Definition from WhatIs.com. [online] Available at: https://searchsecurity.techtarget.com/definition/vulnerability-scanning [Accessed 25 Apr. 2019].
Comments
Post a Comment