| Security Testing When, where, how? Unfortunately, the decision made to implement security controls within an organization, occur after an attack by an intruder or virus. Taking a reactive instead of pro-active approach with the IT Division's involvement in security could cost considerably in loss of time, data, and money. Knowing when and where to make changes can be daunting at times even for pro's in the field who only deal with the infrastructures security. However, what about the smaller network environments, those with an IT Staff of only one or two persons with three or four hundred systems to manage? If the work load is large enough, it could prove difficult to find the time to even think about security. This is one of the areas I wanted Plan-B to be able to help with. Provide tools capable of allowing an administrator to research the current condition of their network and still be able to accomplish other tasks. Some utilities allow you configure a scan for a range of systems, and then provide a report of its findings, even possible solutions to problem areas. |
![]() Plan-B running Sara and Nessus Nessus
and Sara Software utilities used to test the effectiveness of the security controls on your local network are an excellent resource to administrators. Nessus and Sara, shown in the picture above, are equally upto to the task of helping determine the weak points of your infrastucture. |
|
Both Sara and Nessus (seen in the center column above)have this capability. Even though they are an excellent resource, please don't let me leave you with the "set it, forget it" impression. Never rely on any single utility to be responsible for determining the security of your network. There is no application that can provide the "Cure All" solution. Only you know the working foundation of your network scheme and nothing can replace an administrator with a true concern for protecting their data environment. I couldn't begin to try and cover the every aspect of Information Security here. There are already hundreds of books on the subject probably non more recognized than the Hacking Exposed series. They've managed to compile an excellent resource for System and Network Administrators that covers several Operating System platforms. |
||