Red Hat ENTERPRISE LINUX 5 - VIRTUAL SERVER ADMINISTRATION, Руководство по развертыванию

Страница: 614 / 848

Chapter 42. Security Overview
588
Now that the difference between a vulnerability assessment and a penetration test is defined, take the
findings of the assessment and review them carefully before conducting a penetration test as part of
your new best practices approach.
Warning
Attempting to exploit vulnerabilities on production resources can have adverse effects to
the productivity and efficiency of your systems and network.
The following list examines some of the benefits to performing vulnerability assessments.
• Creates proactive focus on information security
• Finds potential exploits before crackers find them
• Results in systems being kept up to date and patched
• Promotes growth and aids in developing staff expertise
• Abates Financial loss and negative publicity
42.2.2.1. Establishing a Methodology
To aid in the selection of tools for a vulnerability assessment, it is helpful to establish a vulnerability
assessment methodology. Unfortunately, there is no predefined or industry approved methodology at
this time; however, common sense and best practices can act as a sufficient guide.
What is the target? Are we looking at one server, or are we looking at our entire network and
everything within the network? Are we external or internal to the company?
The answers to these
questions are important as they help determine not only which tools to select but also the manner in
which they are used.
To learn more about establishing methodologies, refer to the following websites:
•
http://www.isecom.org/projects/osstmm.htm The Open Source Security Testing Methodology
Manual
(OSSTMM)
•
http://www.owasp.org/ The Open Web Application Security Project
42.2.3. Evaluating the Tools
An assessment can start by using some form of an information gathering tool. When assessing the
entire network, map the layout first to find the hosts that are running. Once located, examine each host
individually. Focusing on these hosts requires another set of tools. Knowing which tools to use may be
the most crucial step in finding vulnerabilities.
Just as in any aspect of everyday life, there are many different tools that perform the same job. This
concept applies to performing vulnerability assessments as well. There are tools specific to operating
systems, applications, and even networks (based on the protocols used). Some tools are free; others
are not. Some tools are intuitive and easy to use, while others are cryptic and poorly documented but
have features that other tools do not.
Finding the right tools may be a daunting task and in the end, experience counts. If possible, set up a
test lab and try out as many tools as you can, noting the strengths and weaknesses of each. Review