vulnerability management with openvas
play

Vulnerability management with OpenVAS Henri Doreau - PowerPoint PPT Presentation

Jan 09, 2023 •382 likes •691 views

Vulnerability management with OpenVAS Henri Doreau henri.doreau@greenbone.net 12 th LSM - Strasbourg 2011 OpenVAS Vulnerability management Project news Conclusion Outline OpenVAS 1 Introduction Architecture Vulnerability management 2

  1. Vulnerability management with OpenVAS Henri Doreau henri.doreau@greenbone.net 12 th LSM - Strasbourg 2011

  2. OpenVAS Vulnerability management Project news Conclusion Outline OpenVAS 1 Introduction Architecture Vulnerability management 2 Aims and challenges OpenVAS workflow Project news 3 OpenVAS 4 Upcoming OpenVAS 5 2/26

  3. OpenVAS Vulnerability management Project news Conclusion Outline OpenVAS 1 Introduction Architecture Vulnerability management 2 Aims and challenges OpenVAS workflow Project news 3 OpenVAS 4 Upcoming OpenVAS 5 3/26

  4. OpenVAS Vulnerability management Project news Conclusion OpenVAS 4 The world most advanced Open Source vulnerability scanner! ⇒ 100% Free and Open Source Software (GPLv2) http://www.openvas.org 4/26

  5. OpenVAS Vulnerability management Project news Conclusion Vulnerability management Day to day process to measure the IT threats of an infrastructure identify classify fix/mitigate 5/26

  6. OpenVAS Vulnerability management Project news Conclusion OpenVAS architecture 3-tiers scalable architecture 6/26

  7. OpenVAS Vulnerability management Project news Conclusion openvassd: scanning for vulnerabilities Perform both authenticated and unauthenticated tests Local Security Checks (LSC) information gathering missing updates/patches configuration correctness ⇒ over SSH ⇒ over SMB/WMI 7/26

  8. OpenVAS Vulnerability management Project news Conclusion openvassd: scanning for vulnerabilities Perform both authenticated and unauthenticated tests Local Security Checks (LSC) information gathering Unauthenticated checks network scanning missing updates/patches configuration correctness credentials bruteforce web applications audit ⇒ over SSH ⇒ over SMB/WMI 7/26

  9. OpenVAS Vulnerability management Project news Conclusion openvasmd: the network server Handle scan information Scheduled tasks Scanning results Authentication ⇒ Ensure scalability 8/26

  10. OpenVAS Vulnerability management Project news Conclusion OpenVAS clients Three clients available Portable (Qt) desktop client Web interface CLI for batch processing 9/26

  11. OpenVAS Vulnerability management Project news Conclusion OpenVAS clients Three clients available Portable (Qt) desktop client Web interface CLI for batch processing python and ruby libraries (unofficial) 9/26

  12. OpenVAS Vulnerability management Project news Conclusion OpenVAS Ecosystem Leverage specialized tools expertise nmap (general network scanning) ncrack (network authentication bruteforce tool) w3af, arachni, wapiti (web application audit) 10/26

  13. OpenVAS Vulnerability management Project news Conclusion OpenVAS Ecosystem Uses and relies upon standards Common Vulnerability Enumeration Common Vulnerability Scoring System Common Platform Enumeration Open Vulnerability and Assessment Language IT-Grundschutz 11/26

  14. OpenVAS Vulnerability management Project news Conclusion What is OpenVAS not? OpenVAS is not an automated pentester OpenVAS is not an attack tool OpenVAS won’t fix vulnerable systems 12/26

  15. OpenVAS Vulnerability management Project news Conclusion Outline OpenVAS 1 Introduction Architecture Vulnerability management 2 Aims and challenges OpenVAS workflow Project news 3 OpenVAS 4 Upcoming OpenVAS 5 13/26

  16. OpenVAS Vulnerability management Project news Conclusion Aims Keep threats under control Monitor patchlevel Detect insecure configurations Check for compliance with your security policy ⇒ Harden both the exposed perimeter and the core of the network. 14/26

  17. OpenVAS Vulnerability management Project news Conclusion Scan tasks Task oriented workflow Targets Scan configuration Schedule Escalators 15/26

  18. OpenVAS Vulnerability management Project news Conclusion OpenVAS reports Technical details and recommandations 16/26

  19. OpenVAS Vulnerability management Project news Conclusion Questions OpenVAS aims to answer What can OpenVAS actually do? 17/26

  20. OpenVAS Vulnerability management Project news Conclusion Questions OpenVAS aims to answer Vulnerabilities Which ones? Where? How to fix/mitigate? 18/26

  21. OpenVAS Vulnerability management Project news Conclusion Questions OpenVAS aims to answer Security policy Pass or fail? Does it need improvements? 19/26

  22. OpenVAS Vulnerability management Project news Conclusion Questions OpenVAS aims to answer Security status Is it getting better or worse? How big is the risk? What to do first? 20/26

  23. OpenVAS Vulnerability management Project news Conclusion Outline OpenVAS 1 Introduction Architecture Vulnerability management 2 Aims and challenges OpenVAS workflow Project news 3 OpenVAS 4 Upcoming OpenVAS 5 21/26

  24. OpenVAS Vulnerability management Project news Conclusion OpenVAS 4 ”biggest step forward ever in the History” Massive code cleaning effort Report format plugins framework Scalable master-slave mode Performance increase (scan & analysis) Improved credentials management . . . 22/26

  25. OpenVAS Vulnerability management Project news Conclusion OpenVAS 4 ”biggest step forward ever in the History of OpenVAS” Massive code cleaning effort Report format plugins framework Scalable master-slave mode Performance increase (scan & analysis) Improved credentials management . . . 22/26

  26. OpenVAS Vulnerability management Project news Conclusion OpenVAS 5 What’s expected for OpenVAS 5? High performance network scanning SSH stack refactoring Asset management Convenient trashcan Delta reports (diff scan results) 23/26

  27. OpenVAS Vulnerability management Project news Conclusion DevCon #3 bi-annual OpenVAS developers meeting Discussed core technology Identified priorities Established mid/long term projects Had great fun! 24/26

  28. OpenVAS Vulnerability management Project news Conclusion Demo 25/26

  29. OpenVAS Vulnerability management Project news Conclusion Questions? http://www.openvas.org openvas-discuss@wald.intevation.org 26/26

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend

OpenVAS Open Vulnerability Scanning Free your vulnerabilities! Vlatko Koturjak |

OpenVAS Open Vulnerability Scanning Free your vulnerabilities! Vlatko Koturjak |

LinuxCon #1 OpenVAS Open Vulnerability Scanning Free your vulnerabilities! Vlatko Koturjak | kost@linux.hr 1 LinuxCon #1, 2009-09-22, Portland, Oregon, USA Agenda Nessus Free alternatives Free feed(s) Oval interpreters,

386 views • 38 slides
Vulnerability Management Spring 2020 Jay Chen What is a vulnerability? A vulnerability is a

Vulnerability Management Spring 2020 Jay Chen What is a vulnerability? A vulnerability is a

Vulnerability Management Spring 2020 Jay Chen What is a vulnerability? A vulnerability is a cybersecurity flaw in a system that leave it open to attack. A vulnerability may also refer to any type of weakness in a computer system

407 views • 16 slides
Arjun Surendra SaciWATERs Vulnerability Vulnerability is the propensity to suffer a

Arjun Surendra SaciWATERs Vulnerability Vulnerability is the propensity to suffer a

Arjun Surendra SaciWATERs Vulnerability Vulnerability is the propensity to suffer a significant shock that brings welfare below a socially accepted level (Khl, 2003) Vulnerability increases when there is uncertainty with respect to

529 views • 21 slides
Community Vulnerability Tools Presented to C/CAG Resource Management and Climate Protection

Community Vulnerability Tools Presented to C/CAG Resource Management and Climate Protection

Community Vulnerability Tools Presented to C/CAG Resource Management and Climate Protection Committee May 20, 2020 Outline Why use Community Vulnerability Tools? Major tools Benefits and examples of how to use them Discussion

362 views • 24 slides
Contents What is vulnerability? Why conduct vulnerability assessments? Defining

Contents What is vulnerability? Why conduct vulnerability assessments? Defining

6/19/2015 Vulnerability and Capacity Assessment Index (VCAI) for Climate Change Adaptation SVRK Prabhakar USAID ADAPT Asia-Pacific Presented at NABARD Training Workshop, Mumbai on 18 June 2015 Contents What is vulnerability? Why

705 views • 21 slides
Vulnerability Assessm ent 2 0 0 4 Luanda, 2 5 June 2 0 0 4 Vulnerability Assessment 2004 - p1

Vulnerability Assessm ent 2 0 0 4 Luanda, 2 5 June 2 0 0 4 Vulnerability Assessment 2004 - p1

Vulnerability Analysis and Food Aid W orking Group Chaired by W FP/ VAM Unit Vulnerability Assessm ent 2 0 0 4 Luanda, 2 5 June 2 0 0 4 Vulnerability Assessment 2004 - p1 Overview 1 . Methodology of the VA 2 0 0 4 2 . Highlights of

703 views • 28 slides
Metastore About Metastore Solutions Timeline Mainframe ICT Security Threat and Vulnerability

Metastore About Metastore Solutions Timeline Mainframe ICT Security Threat and Vulnerability

Metastore About Metastore Solutions Timeline Mainframe ICT Security Threat and Vulnerability Management z/OS Security Management Identity, Access and Entitlement Management z/OS Operations Management 1992 2016 Windows Server Data

304 views • 9 slides
Vulnerability Screening Tool Identifying and addressing vulnerability: A tool for asylum and

Vulnerability Screening Tool Identifying and addressing vulnerability: A tool for asylum and

Vulnerability Screening Tool Identifying and addressing vulnerability: A tool for asylum and migration systems Purpose Intended to guide & inform frontline workers & decision makers on the relevance of vulnerability factors to

507 views • 19 slides
Earthquake Vulnerability Earthquake Vulnerability Vulnerability Assessment & EVR measures

Earthquake Vulnerability Earthquake Vulnerability Vulnerability Assessment & EVR measures

Earthquake Vulnerability Earthquake Vulnerability Vulnerability Assessment & EVR measures Islamabad Pakistan Assessment and Vulnerability Assessment and Vulnerability Reduction Measures Reduction Measures adpc Asian Disaster

702 views • 46 slides
Youve Got Your Nice List of Bugs, Now What? Vulnerability Discovery and Management

Youve Got Your Nice List of Bugs, Now What? Vulnerability Discovery and Management

Youve Got Your Nice List of Bugs, Now What? Vulnerability Discovery and Management Processes in the Wild Noura Alomar, Primal Wijesekera, Edward Qiu, and Serge Egelman University of California (Berkeley) and ICSI Motivation Many

688 views • 23 slides
Introduction What is Disaster vulnerability? Vulnerability is the inability to resist a

Introduction What is Disaster vulnerability? Vulnerability is the inability to resist a

Vulnerability to Disasters: A Gendered Analysis on Water Availability and Livelihoods in Nadu Colony, Kovalam, Chennai, India Group No: 02 Sumaia Kashem Shreeya Lohani Shanmuga Priya. G Meththa Prabodhani Menike

834 views • 40 slides
HOw NOT to suck at Vulnerability Management Shellcon.io Plug (@plugxor) and Chris

HOw NOT to suck at Vulnerability Management Shellcon.io Plug (@plugxor) and Chris

HOw NOT to suck at Vulnerability Management Shellcon.io Plug (@plugxor) and Chris (@ChrisHalbersma) Current Landscape Apache Struts backend server exposed to the Internet DATABASE EXPOSED UNSECURED SERVER DATA LEAK

955 views • 57 slides
Vulnerability and Threat Management and Prevention Weston Hecker Security Expert With KLJ Systems

Vulnerability and Threat Management and Prevention Weston Hecker Security Expert With KLJ Systems

A1 Vulnerability and Threat Management and Prevention Weston Hecker Security Expert With KLJ Systems Network Analyst/Penetration Tester/President Of Computer Security Association Of North Dakota Slide 1 A1 Author, 9/16/2013 About Me About Me:

925 views • 23 slides
Web vulnerability scanning and exploitation tools Scaling vulnerability scanning Companies

Web vulnerability scanning and exploitation tools Scaling vulnerability scanning Companies

Web vulnerability scanning and exploitation tools Scaling vulnerability scanning Companies with 1000+ web applications running Move to m -services architectures making things worse Huge shortage of skilled security engineers to

732 views • 48 slides
The Maldives Population Distribution Vulnerability Indicators Vulnerability Indicators

The Maldives Population Distribution Vulnerability Indicators Vulnerability Indicators

The Maldives Population Distribution Vulnerability Indicators Vulnerability Indicators (excluding Male') Highest elevation 1.5m Population: 298,968 above sea level less than 1000 97% of all inhabited 59 % Total number of

357 views • 4 slides
1 Vulnerability in WPA2 Hole196 Hole196 Vulnerability in WPA2 Presenters: Anthony Paladino,

1 Vulnerability in WPA2 Hole196 Hole196 Vulnerability in WPA2 Presenters: Anthony Paladino,

1 Vulnerability in WPA2 Hole196 Hole196 Vulnerability in WPA2 Presenters: Anthony Paladino, Managing Director, Systems Engineering Dr. Kaustubh Phanse, Principal Wireless Architect Md. Sohail Ahmad, Senior Security Researcher Moderator: Della

314 views • 29 slides
Network Security Fundamentals Security Training Course Dr. Charles J. Antonelli The University

Network Security Fundamentals Security Training Course Dr. Charles J. Antonelli The University

Network Security Fundamentals Security Training Course Dr. Charles J. Antonelli The University of Michigan 2013 Network Security Fundamentals Module 8 Scanning Topics Scanning fundamentals Nessus installation & examination 04/13

235 views • 21 slides
vcsh manage config files in $HOME via fake bare git repositories Richard Hartmann, RichiH@ {

vcsh manage config files in $HOME via fake bare git repositories Richard Hartmann, RichiH@ {

Intro Technical details Using vcsh Outlook Outro vcsh manage config files in $HOME via fake bare git repositories Richard Hartmann, RichiH@ { freenode,OFTC,IRCnet } , richih.mailinglist@gmail.com 2012-02-04 Richard Hartmann, RichiH@ {

582 views • 20 slides
OPS: Optimized Shuffle Management System for Apache Spark Yuchen Cheng * , Chunghsuan Wu * ,

OPS: Optimized Shuffle Management System for Apache Spark Yuchen Cheng * , Chunghsuan Wu * ,

OPS: Optimized Shuffle Management System for Apache Spark Yuchen Cheng * , Chunghsuan Wu * , Yanqiang Liu * , Rui Ren * , Hong Xu , Bin Yang , Zhengwei Qi * * Shanghai Jiao Tong University City University of Hong Kong Intel

217 views • 19 slides
Thames Valley Berkshire LEP Careers Hub Launch 10 July 2019 Sarah Gray Network Operations

Thames Valley Berkshire LEP Careers Hub Launch 10 July 2019 Sarah Gray Network Operations

Thames Valley Berkshire LEP Careers Hub Launch 10 July 2019 Sarah Gray Network Operations Manager Careers and Enterprise Company tvb-enterpriseadvisernetwork.co.uk The role of the CEC digital tools Career Hubs WAVE 2 SEPT 2019

821 views • 42 slides
Securing Your System CS 236 On-Line MS Program Networks and Systems Security Peter Reiher

Securing Your System CS 236 On-Line MS Program Networks and Systems Security Peter Reiher

Securing Your System CS 236 On-Line MS Program Networks and Systems Security Peter Reiher Lecture 19 Page 1 CS 236 Online Putting It All Together Weve talked a lot about security principles And about security problems And

209 views • 17 slides
Overview System Security Scanning Security Scanning and Discovery Important Security Web

Overview System Security Scanning Security Scanning and Discovery Important Security Web

Overview System Security Scanning Security Scanning and Discovery Important Security Web Sites Fingerprinting OS FingerPrinting IP Stacks Share Scans Chapter 14 SNMP Vulnerabilities FingerPrinting TCP/IP Services

439 views • 8 slides
15 Networking and Package Management CS 2043: Unix Tools and Scripting, Spring 2019 [1]

15 Networking and Package Management CS 2043: Unix Tools and Scripting, Spring 2019 [1]

15 Networking and Package Management CS 2043: Unix Tools and Scripting, Spring 2019 [1] Matthew Milano February 27, 2019 Cornell University 1 Table of Contents 1. welcome back to THE INTERNET 2. Package Management 3. System Specific

688 views • 41 slides
Extended UDP Multiple Hole Punching Method to Traverse Large Scale NATs Kazuhiro Tobe 1 , Akihiro

Extended UDP Multiple Hole Punching Method to Traverse Large Scale NATs Kazuhiro Tobe 1 , Akihiro

Proceedings of the Asia Pacific Advanced Network Extended UDP Multiple Hole Punching Method to Traverse Large Scale NATs Kazuhiro Tobe 1 , Akihiro Shimoda 1 and Shigeki Goto 1 1 Waseda University / 3-4-1 Okubo Shinjuku-ku Tokyo, Japan E-Mails:

188 views • 7 slides

More recommend