Nessus Network Auditing

The first edition of Nessus sold just under 10,000 units worldwide.

Russ Rogers (Edited by)

9781597492089, Elsevier Science

Paperback / softback, published 27 June 2008

448 pages
23.5 x 19 x 2.8 cm, 0.89 kg

The Updated Version of the Bestselling Nessus Book. This is the ONLY Book to Read if You Run Nessus Across the Enterprise. Ever since its beginnings in early 1998, the Nessus Project has attracted security researchers from all walks of life. It continues this growth today. It has been adopted as a de facto standard by the security industry, vendor, and practitioner alike, many of whom rely on Nessus as the foundation to their security practices. Now, a team of leading developers have created the definitive book for the Nessus community. Perform a Vulnerability Assessment Use Nessus to find programming errors that allow intruders to gain unauthorized access. Obtain and Install Nessus Install from source or binary, set up up clients and user accounts, and update your plug-ins. Modify the Preferences Tab Specify the options for Nmap and other complex, configurable components of Nessus. Understand Scanner Logic and Determine Actual Risk Plan your scanning strategy and learn what variables can be changed. Prioritize Vulnerabilities Prioritize and manage critical vulnerabilities, information leaks, and denial of service errors. Deal with False Positives Learn the different types of false positives and the differences between intrusive and nonintrusive tests. Get Under the Hood of Nessus Understand the architecture and design of Nessus and master the Nessus Attack Scripting Language (NASL). Scan the Entire Enterprise Network Plan for enterprise deployment by gauging network bandwith and topology issues.

1. Vulnerability Assessment 2. Introducing Nessus 3. Installing Nessus 4. Running Your First Scan 5. Interpreting Results 6. Vulnerability Types 7. False Positives 8. Under the Hood 9. The Nessus Knowledge Base 10. Enterprise Scanning 11. NASL 12. The Nessus User Community 13. Compliance Monitoring with Nessus 3

Subject Areas: Computer security [UR]