Providing options to specify the ports in both ranges and lists will allow the user to optimize their scans, thereby delivering quicker results, as a full port scan in general takes 10 times longer than a 1,000-port scan or a port-specified scan. This will also allow the user to find out hosts with specific ports open.
- Title Page
- Copyright and Credits
- About Packt
- Contributors
- Preface
- Introduction to Network Vulnerability Scanning
- Understanding Network Scanning Tools
- Port Scanning
- Vulnerability Scanning
- Configuration Audits
- Report Analysis and Confirmation
- Understanding the Customization and Optimization of Nessus and Nmap
- Network Scanning for IoT, SCADA/ICS
- Vulnerability Management Governance
- Setting Up the Assessment Environment
- Security Assessment Prerequisites
- Target scoping and planning
- Gathering requirements
- Deciding upon the type of vulnerability assessment
- Estimating the resources and deliverables
- Preparing a test plan
- Getting approval and signing NDAs
- Summary
- Information Gathering
- Enumeration and Vulnerability Assessment
- Gaining Network Access
- Assessing Web Application Security
- Privilege Escalation
- Maintaining Access and Clearing Tracks
- Vulnerability Scoring
- Threat Modeling
- Patching and Security Hardening
- Vulnerability Reporting and Metrics
- Importance of reporting
- Type of reports
- Reporting tools
- Collaborative vulnerability management with Faraday v2.6
- Metrics
- Mean time to detect
- Mean time to resolve
- Scanner coverage
- Scan frequency by asset group
- Number of open critical/high vulnerabilities
- Average risk by BU, asset group, and so on
- Number of exceptions granted
- Vulnerability reopen rate
- Percentage of systems with no open high/critical vulnerability
- Vulnerability ageing
- Summary
- Other Books You May Enjoy
How it works…
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.