Search

Vulnerability assessment (VA) tools are usually GUI applications requiring human interaction which is not often desirable while performing tests in large network environments. Effectiveness of this setup can be limited due to many reasons such as: both configuration time and duration of assessment are both increased, test traffic passing internetwork boundaries can be mistakenly identified by IDS as DoS attack, intervening firewalls may block or silently drop test traffic causing incomplete and erroneous test results, local tests performed on individual host may require setup and management of additional security credentials. Lightweight software solution based on automation, distribution and code portability is developed to address majority of “ GUI setup” problems and to provide higher degree of automation. Additionally, integration with SIM solution is provided and results are evaluated.