Day 27 - Validation via Vulnerability Scanning

SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Day 27 - Validation via Vulnerability Scanning
The second day in our "recovery" phase: A system isn't exactly "safe" after the malware is removed. What you actually need to figure out is how the system got compromissed in the first place, and how to prevent a future compromisse. As already pointed out, just removing the malware will just get you back to getting exploited again. What software and what tricks do you use to: make sure the vulnerability was remidiated? acertain some level of confidence that the malware didn't leave behind any backdoors? Nessus, a popular vulnerability scanner, has recently changed licenses. Did this affect you (or not)? Are there any alternatives? How do you continually monitor systems as new vulnerabilities and patches are released all the time. ------ Johannes B. Ullrich, Ph.D. SANS Technology Institute I will be teaching next: Application Security: Securing Web Apps, APIs, and Microservices - SANS London June 2022	Johannes 4479 Posts ISC Handler Oct 31st 2008
Thread locked Subscribe	Oct 31st 2008 1 decade ago