02233

Netværkssikkerhed
Network Security

• Introduktion
• Nessus Scan
• Nessus Questions
  • Question 1
  • Question 2
  • Question 3
  • Question4
  • Question 5
  • Question 6
  • Question 7
  • Question 8
  • Question 9
  • Question 10
  • Question 11
  • Question 12
  • Question 13
  • Question 14
  • Question 15
  • Question 16
  • Question 17
  • Question 18
  • Question 19
  • Question 20
  • Question 21
  • Question 22
  • Question 23
  • Question 24
  • Question 25
• Snort Questions
• References

Question 14

Which precautions should an administrator consider before using Nessus?

To prevent Nessus from adversely affecting the network, it is necessary to first construct a test lab of non-production machines identical to those which will eventually be scanned. The test lab allows you to configure these test machines, the Nessus test settings and iron out any issues which could possible occur before running the Nessus scan on the actual environment. To test if Nessus is running properly, it is useful to create several ÒhoneypotsÓ or test subjects with known vulnerabilities and then see if Nessus detects them. Also, because the Nessus system is capable of having its tests updates very frequently, it is necessary that all Network Daemons to be used in the test are running the same update version correctly.

Some of the problems are [B1]:

• inadvertently doing a DOS attack on the whole network
• crashing vulnerable services
• messing up NAT and routing tables by overloading them

Bjarne D Mathiesen

Michael Pantridge

Thabet Al-Assdi

Chang Jensen