Full Disclosure mailing list archives
RE: Top 15 Reasons Why Admins Use Security Scan ners
From: Harlan Carvey <keydet89 () yahoo com>
Date: Wed, 28 Apr 2004 15:04:26 -0700 (PDT)
Question: Should admins be using securityscanners? Someone should be. Admins should be to confirm that their environment is in the state that they believe it to be.
I guess we'll have to agree to disagree. In my experience, the guy who set a system up shouldn't be the one to inspect it, or verify it. Also, I'm sort of thinking that if someone doesn't know how to set up and maintain a system, what good is it for that same person to run a scanner on it?
Again, have new types of vulnerabilities been discovered, are there new best practices. The reason Code Red hit so hard was because people didn't know about removing script mappings - it wasn't a common best practice. It became one pretty quickly after Code Red.
Actually, the best practice of removing unnecessary functionality has long been in place, well before Code Red reared it's head. The same is true with the best practice of removing unnecessary script mappings...this was documented by Microsoft and available for free from their site well before Code Red came out. With regards to the rest of your comments, I think you're missing the point. I'm not saying that a security scanner shouldn't be run...I just don't think that admins should be the ones to run the scanner. _______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html
Current thread:
- RE: Top 15 Reasons Why Admins Use Security Scan ners Starford, Christopher D. (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Ron DuFresne (Apr 30)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Ron DuFresne (Apr 30)
- <Possible follow-ups>
- RE: Top 15 Reasons Why Admins Use Security Scan ners Stuart Fox (DSL AK) (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Frank Knobbe (Apr 28)
- Re: Top 15 Reasons Why Admins Use Security Scan ners Jeremiah Cornelius (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Vanish Pattni (DSL AK) (Apr 28)
- RE: Top 15 Reasons Why Admins Use Security Scan ners Harlan Carvey (Apr 28)