| |
The ONLY Book to Read if You Run Nessus Across the Enterprise Ever since its beginnings in early 1998, the Nessus Project has attracted security researchers from all walks of life. It continues this growth today. It has been adopted as a de facto standard by the security industry, vendor, and practitioner alike, many of whom rely on Nessus as the foundation to their security practices. Now, Nessus project founder Renaud Deraison and a team of leading developers have created the definitive book for the Nessus community. Table of ContentsForewordChapter 1: Vulnerability AssessmentChapter 2: Introducing NessusChapter 3: Installing NessusChapter 4: Running Your First ScanChapter 5: Interpreting ResultsChapter 6: Vulnerability TypesChapter 7: False PositivesChapter 8: Under the HoodChapter 9: The Nessus Knowledge BaseChapter 10: Enterprise ScanningChapter 11: NASLChapter 12: The Nessus User CommunityAppendix A: The NASL2 Reference ManualAppendix B: Utilizing Domain Credentials to Enhance Nessus Scans.About the Authors Jay Beale is a security specialist focused on host lockdown and security audits. He is the lead developer of the Bastille project, which creates a hardening script for Linux, HPUX, and Mac OS X; a member of the Honeynet Project; and the Linux technical lead in the Center for Internet Security. A frequent conference speaker and trainer, Jay speaks and trains at the Black Hat and LinuxWorld conferences, among others. He coauthored the Syngress international bestseller Snort 2.0 Intrusion Detection (ISBN: 1931836744) and serves as the series and technical editor of the Syngress Open Source Security series.HD Moore is one of the founding members of Digital Defense, a security firm that was created in 1999 to provide network risk assessment services. In the last four years, Digital Defense has become one of the leading security service providers for the financial industry, with over 200 clients across 43 states.Noam Rathaus is the cofounder and CTO of Beyond Security, a company specializing in the development of enterprisewide security assessment technologies, vulnerability assessmentbased SOCs (security operation centers) and related products. He has contributed to several securityrelated opensource projects including an active role in the Nessus security scanner project.Renaud Deraison is the Founder and the primary author of the opensource Nessus vulnerability scanner project. He has worked for SolSoft, and founded his own computing security consulting company, Nessus Consulting.Raven Alder is a Senior Security Engineer for True North Solutions, a consulting firm specializing in network security design and implementation. She specializes in scalable enterpriselevel security, with an emphasis on defense in depth.George A. Theall is a frequent contributor to the Nessus mailing lists, is the author of several popular Nessusrelated tools and has also contributed rewrites of several of the supplemental scripts and associated documentation in Nessus, to be distributed starting with version 2.2.
|
| |
|