Vulnerability Management Training 2

1
SECURIUM FOX offers cyber security consultancy
services with its expert and experienced team. We
are providing consulting services to prevent
cyber attacks, data leak and to ensure that our
customers are ready and safe against cyber
attacks, with more than 15 years of
experience.In addition to pentests and
consulting services, SECURIUM FOX prepares its
customers and field enthusiasts for real life
scenarios by providing trainings in the lab
environment which was prepared by themselves,
with its young, dynamic and constantly following
team.Everytime that hackers are in our lives,
there are always risks that we can face with a
cyber attack. Over the years cyber security has
become a critical precaution for all
organizations and companies after the effects and
number of attacks. SECURIUM FOX tests the weak
points of customers for possible attacks and
provides consulting services to eliminate these
weak points.SECURIUM FOX team also offers
support for the development of our country in
this field by supporting free events being
organized as a volunteer by the Octosec team.
ABOUT US
2

• VULNERABILITY MANAGEMENT

3
Introduction to vulnerability management tools

• Organizations today, from small businesses with
  Web and email access to multisite global
  enterprises, face increasingly sophisticated
  attacks carried out over the Internet. Once an
  attacker gains access to internal networks, the
  damage that ensues can be catastrophic, resulting
  in data disclosures and destruction, business
  disruption and damage to an organization's
  reputation. Even with solid perimeter defenses
  (e.g., firewalls, intrusion detection/prevention
  systems, VPNs and so on), hardened systems and
  endpoint protection, security breaches still
  occur. The question is when and how will these
  security breaches happen?

4

• The attack surface of an IT environment changes
  constantly. As new computers and devices are
  installed, operating systems and applications are
  upgraded and firewall rules are changed, causing
  new vulnerabilities to be introduced. One way to
  find out how attackers could breach network
  defenses and damage internal servers, storage
  systems and endpoints -- and the data they hold
  and transfer -- is to discover and close those
  vulnerabilities. That's where vulnerability
  management tools come into play.

5
What is vulnerability management?

• Vulnerability management is a continuous process
  of discovering, prioritizing and mitigating
  vulnerabilities in an IT environment. Although
  vulnerability management tools vary in strength
  and feature sets, most include the following
• Discovery The process of identifying and
  categorizing every asset in a networked
  environment and storing attributes in a database.
  This phase also includes discovering
  vulnerabilities associated with those assets.

6

• Prioritization The process of ranking known
  asset vulnerabilities and risk. Vulnerabilities
  are assigned a severity level, such as from 1 to
  5, with 5 being the most critical. Some systems
  rank vulnerabilities as low, medium and high.
• Remediation/Mitigation The system provides links
  to information about each vulnerability
  discovered, which includes recommendations for
  remediation and vendor patches, where applicable.
  Some vendors maintain their own vulnerability
  intelligence database information others provide
  links to third-party resources such as The MITRE
  Corporation's Common Vulnerabilities and
  Exposures database, the Common Vulnerability
  Scoring System and/or the SANS/FBI Top 20, to
  name a few.

7

• Organizations tackle the most severe
  vulnerabilities first and work their way down to
  the least severe as time and resources permit.
  Some vulnerabilities don't pose a serious threat
  to the organization and may simply be accepted,
  which means they are not remediated. In other
  words, the risk is judged to be less than the
  costs of remediation.

8
How do vulnerability management tools work?

• Vulnerability management tools come in three
  primary forms stand-alone software, a physical
  appliance with vulnerability management software
  or a cloud-hosted service. A customer uses a
  Web-based interface to configure the product to
  scan a range of Internet Protocol (IP) addresses
  -- both IPv4 and IPv6 -- the entire network or
  URL, and may select other criteria to inspect,
  such as the file system, configuration files
  and/or the Windows registry. The more criteria
  and the larger the number of IPs, the longer a
  scan takes to complete. Most vulnerability
  management tools provide preconfigured scans, and
  an administrator can modify those templates to
  save customized scans that run on demand or on a
  scheduled basis.

9

• Note Highly penetrating scans that assess
  "hard-to-reach" areas of a network may require an
  administrator to temporarily modify a firewall to
  get the most detailed results, although some
  vendors claim their products can perform complete
  scans without any such firewall modifications.
• A comprehensive vulnerability scanner should be
  able to perform continuous inventorying of wired
  and wireless devices, operating systems,
  applications including Web apps, ports, services,
  protocols, as well as virtual machines and cloud
  environments.

10

• Vulnerability management tools may perform
  authenticated and unauthenticated vulnerability
  scans. An unauthenticated scan does not require
  administrative credentials and focuses on basic
  issues, such as open ports and services, identity
  of operating systems and so on. Authenticated
  scans typically require admin credentials and are
  more intense, and they may negatively impact a
  system or network. Although authenticated scans
  must be used cautiously, usually outside of peak
  usage hours, they reveal more vulnerabilities
  than unauthenticated ones.

11

• When a vulnerability management tool is put in
  place, the initial scan that's run should be as
  complete as possible. This also serves to
  establish a baseline. Subsequent scans then show
  trends and help administrators understand the
  security posture of the environment over time.
  Most vulnerability management products provide
  detailed trend analysis reports and charts for
  display on the console or in print for
  distribution to managers and executives.

12

• Some of these products also include exploit
  software that's used as a penetration test tool.
  When vulnerabilities are exposed, an
  administrator can use the exploit software to see
  how an attacker could exploit the vulnerability
  without disrupting network operations.
• A vulnerability management tool must be used
  regularly to be effective. Like antivirus
  products, the data gathered during scans is only
  as good as the last time it was updated. This
  means daily scans for most organizations
  although small environments or those whose
  critical assets are not exposed to the Internet
  may find a weekly scan sufficient.

13
You can always contact with SECURIUM FOX. You can
contact us through our email addresses or by
using the contact form on the side.

• INFO
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,
• Gurunanak Nagar,Patamata,Vijyawada,
• Andhra Pradesh -520010
• 9652038194
• 08666678997
• info_at_securiumfoxtechnologies.com

14

• info_at_securiumfoxtechnologies.com
• Andhra Pradesh Office
• 91 8666678997,91 91652038194
• 3rd Floor,Lohia Towers,
• Nirmala Convent Rd,Gurunanak Nagar,Patamata,Vijaya
  wada,
• info_at_securiumfoxtechnologies.com
• UK Office
• 44 2030263164
• Velevate, Kemp House, 152 - 160,City Road,EC1V
  2NX
• London
• info_at_securiumfoxtechnologies.com
• Tamil Nadu Office
• 91 9566884661
• Kailash Nagar, Nagar, Tiruchirappalli, Tamil Nadu
  620019
• info_at_securiumfoxtechnologies.com

• Noida Office
• 91 (120) 4291672, 91 9319918771
• A-25, Block A,
• Second Floor,Sector - 3,
• Noida, India
• info_at_securiumfoxtechnologies.com
• USA Office
• 1 [phone]
• 33 West,17th Street,
• New York,
• NY-10011, USA
• info_at_securiumfoxtechnologies.com
• Dubai Office
• 971 545391952
• Al Ansari Exchange, Ansar Gallery - Karama
  Branch, Hamsah-A Building - 3 A St - Dubai -
  United Arab Emirates