Vulnerability Assessment Training: Protecting Your Organization

Uncovering infrastructure vulnerabilities

• Uncovering switch weaknesses
• Vulnerabilities in infrastructure support servers
• Network management tool attacks

Attacks against analyzers and IDS

• Identifying Snort IDS bypass attacks
• Corrupting memory and causing Denial of Service

Exposing server vulnerabilities

• Scanning servers: assessing vulnerabilities on your network
• Uploading rogue scripts and file inclusion
• Catching input validation errors
• Performing buffer overflow attacks
• SQL injection
• Cross-Site Scripting (XSS) and cookie theft

Revealing desktop vulnerabilities

• Scanning for desktop vulnerabilities
• Client buffer overflows
• Silent downloading: spyware and adware
• Identifying design errors

Implementing scanner operations and configuration

• Choosing credentials, ports and dangerous tests
• Preventing false negatives
• Creating custom vulnerability tests
• Customizing Nessus scans
• Handling false positives

Creating and interpreting reports

• Filtering and customizing reports
• Interpreting complex reports
• Contrasting the results of different scanners

Researching alert information

• Using the National Vulnerability Database (NVD) to find relevant vulnerability and patch information
• Evaluating and investigating security alerts and advisories
• Employing the Common Vulnerability Scoring System (CVSS)

Identifying factors that affect risk

• Evaluating the impact of a successful attack
• Determining vulnerability frequency
• Calculating vulnerability severity
• Weighing important risk factors
• Performing a risk assessment

The vulnerability management cycle

• Standardizing scanning with Open Vulnerability Assessment Language (OVAL)
• Patch and configuration management
• Analyzing the vulnerability management process

Vulnerability controversies

• Rewards for vulnerability discovery
• Markets for bugs and exploits
• Challenge programs