Question

A vulnerability scanner can assess a variety of vulnerabilities across information systems. These vulnerabilities may have originated from a vendor, system administration activities, or general day-to-day user activities. For your main post, identify a vulnerability scanner and describe the functions and capabilities it provides. Given the number of scanners on the market, explain how your choice differentiates from other options available. You may want to consider cost, capability, and collaborative functions in your post. Finally, explain how your choice can be accessed for consumer use.

Answer 1

Answer :

Vulnerability is an Inherent weakness in the design , configuration , or implementation of a network or system that renders it susceptible to a threat.

following facts of Vulnerability in the information systems

1 Software Bugs :- Software bug  are so common that users have developed technique to work around the consequences , and bugs that make saving work necessary every half an hours or crash the computer every so often are considered to be a normal part of computing. for example failure to handle exception conditions, validation error.

2. Timing windows :- This problem may occur when a temporary file is exploited by an intruder to gain access to the files, overwrite important data, and used the file as a gateway for advancing further into the system.

3. Insure default configurations :- Insure default configurations occur when vendors use known default password to make it is easy as possible for consumer to setup new systems.

4. Trusting untrustworthy information:- This is usually a problem that affect routers, or those computers that connect one network to another network.

5. Bad Protocols :- Some protocols , or the standards by which information is exchange over the internet, lack any security at all.

6. End users :- Generally users of information system are not professionals and are not always security conscious. example save confidential files to placde where they are not properly protected.