Identifying Vulnerabilities

Identifying Vulnerabilities

1. Commercial analysis tools

   • Also called Vulnerability scanners and assess computers, computer systems, networks or applications for security weaknesses
   • They can only highlight weaknesses that have already been identified in other systems or software and must be constantly updated
   • Unfortunately they can also be bought by hackers and be used in a negative way

2. Ethical hacking

   • A computer and networking expert who systematically attempts to penetrate a computer system or network on behalf of it's owners for the purpose of finding security vulnerabilities that a malicious hacker could potentially exploit
   • Also known as white hat hackers

3. Penetration testing

   • It is used to test a computer systemor network in order to find vulnerabilities that an attacker could exploit
   • Testers take the role of hackers and try to gain unauthorised access
   • Testing also assesses the security awareness of users and demonstrates the effectiveness of network security policies

4. Review of network and user policies

   • Network policies are rules which should be set
     • What should be done if there is a problem or breach of security
     • When backups will be made and where thy will be kept
     • When and who is responsible for applying software patches and operating system updates
     • What users can and cannot do on the network, e.g. must not use removable storage devices, install their own software or download files from the internet

Imagens e arquivos do mapa