Vulnerability management project

Assignment Help Basic Computer Science

Reference no: EM132662955

As part of your Vulnerability Management project, you analyzed a report on a Windows system within the company network vulnerable to the MS17-010 exploit. That report was created using OpenVAS, a free vulnerability scanner designed to run on Linux operating systems. Now that you've examined a vulnerability assessment report for a Windows machine, it's time to see what the same tool produces from a Linux system. OpenVAS was used to scan a Linux machine on the network running the company's database applications. This machine is using an older version of Linux because the company's database applications are not supported with the latest Linux shared libraries. This system contains critical data and cannot be taken offline.

Your analysis of these two reports should provide you with a good understanding of the OpenVAS tool and the reports you will encounter in the workplace. The report used for this discussion limits the scope to a single host to allow you to focus on the vulnerabilities you would encounter on a Linux machine in the workplace. You will also be able to compare/contrast the vulnerabilities across the two OS platforms.

You will analyze the results from a commercial VM scanner. You'll be better prepared to assess the output from the two different vulnerability scanning tools and to form the basis of your recommendation to management.

Review Report of Linux Server (OLD) and answer the following questions in your response:

1. For this Linux system, what do you recommend fixing right away? Are there dangers if the vulnerabilities and associated threats are not fixed?

2. How do you fix the problem(s) identified? Can you defer mitigation for another time? How can the problem(s) be fixed if the system cannot be taken offline?

Judy is considering asking the pen tester to rescan the company systems using the commercial tool, Nessus. The organization has an evaluation version that can be used for 30 days. After that, the company will need to purchase the tool. The cost is significant.

3. Since some machines were already scanned with OpenVAS, should you also consider scanning the same systems with Nessus? Why or why not?

4. Conduct open source research using the internet. Roughly, what is the cost to license Nessus for one year?

Reference no: EM132662955

Questions Cloud

What factors should an auditor take regarding events : Explain what is subsequent events. What factors should an auditor take regarding events that have occurred after the financial report is issued

How should an employer obligation for employee benefits : According to AASB 119, how should an employer's obligation for employee benefits be measured? Provide the journal entries in the books of Shelley Ltd

Keylogging or keyboard capturing : Keystroke logging, often referred to as keylogging or keyboard capturing, is the action of recording (logging) the keys struck on a keyboard,

Calculate the expected annual sick-leave expense : Bear Island Ltd has a weekly payroll of $300 000. Calculate the expected annual sick-leave expense for Bear Island Ltd (on the basis of average salaries)

Vulnerability management project : As part of your Vulnerability Management project, you analyzed a report on a Windows system within the company network vulnerable to the MS17-010 exploit.

Prepare journal entries for each of the transactions : Prepare journal entries for each of the following transactions for ABL Ltd that started operations in September 2019

How would you ensure that team performance is being evaluate : Teams are common in nearly every type of organization today; thus, finding appropriate ways to include team performance in the performance management process.

Represent enterprise security architecture solution : Your work over the next 8 weeks will lead-up to your ability to represent an enterprise security architecture solution as a diagram or diagrams with annotations

Article on system breach : Locate article on system breach (Target stores, US Government, and many more). briefly explain situation and what kind of information was compromised

User Account

All Pages