Identifying Vulnerabilities

Identifying Vulnerabilities

1. Commercial analysis tools

   • Also called Vulnerability scanners and assess computers, computer systems, networks or applications for security weaknesses
   • They can only highlight weaknesses that have already been identified in other systems or software and must be constantly updated
   • Unfortunately they can also be bought by hackers and be used in a negative way

2. Ethical hacking

   • A computer and networking expert who systematically attempts to penetrate a computer system or network on behalf of it's owners for the purpose of finding security vulnerabilities that a malicious hacker could potentially exploit
   • Also known as white hat hackers

3. Penetration testing

   • It is used to test a computer systemor network in order to find vulnerabilities that an attacker could exploit
   • Testers take the role of hackers and try to gain unauthorised access
   • Testing also assesses the security awareness of users and demonstrates the effectiveness of network security policies

4. Review of network and user policies

   • Network policies are rules which should be set
     • What should be done if there is a problem or breach of security
     • When backups will be made and where thy will be kept
     • When and who is responsible for applying software patches and operating system updates
     • What users can and cannot do on the network, e.g. must not use removable storage devices, install their own software or download files from the internet

Images and files in the map