Slashdot Mirror

← Back to Stories (view on slashdot.org)

Nmap Security Tool Survey

Posted by michael on from the portscanning-for-fun-and-profit dept.

spring writes "Every so often, the author of everyone's favorite network reconnaissance tool, nmap, runs a survey to determine which security-oriented software products are most popular. This year's tool survey was just released, and it contains some interesting results. Old favorites like Nessus, Snort, Netcat, and Ethereal made the list, of course. SAINT and SARA are still around. But a number of new tools appeared this year, like Windows-only GFI LANguard, SuperScan, and Cain & Abel. Nikto and Kismet demonstrate the growing importance of wireless networks. The survey contains many good tools. Certainly worth a read."

5 of 104 comments (clear)

  1. Security tools are awesome, but.... by whiteranger99x · · Score: 5, Insightful

    remember that these tools aren't going to be the "end all/be all" of network security.

    You also have to have a good preventive security plan, which these tools will help out in. However, there should also be a plan of action should these security measures get bypassed (i.e. an insider job, program exploits, trojans, etc...)

    But that's just my contention...

    --
    Join the TWIT army now!
    1. Re:Security tools are awesome, but.... by FiDooDa · · Score: 5, Insightful

      remember that these tools aren't going to be the "end all/be all" of network security.

      isn't why they are called tools and not solutions ?!?!

    2. Re:Security tools are awesome, but.... by SEWilco · · Score: 4, Insightful

      There is also no requirement to depend upon a single tool. Having alarms on your doors doesn't protect your windows. Perimeter detectors establish a fence, while tripwires, beams, and area detectors offer notification of activity in different ways -- and design is affected by issues such as whether or not you have a cat. Don't limit your design to only using one tool, consider your needs and the variety of tools.

  2. Re:Ethereal a security tool ? by the+uNF+cola · · Score: 4, Insightful

    You'd be surprised. tcpdump/ethereal is great for say, when some jerk is trying to DOS you and you need to know how.

    Knowing the how allows you to put in filters. Filters allows you to operate.

    --

    --
    "I'm not bright. Big words confuse me. But Wanda loves me and that should be enough for you." - Cosmo

  3. Re:Ethereal a security tool ? by hbackert · · Score: 4, Insightful

    It's a nice way to check a connection is not made, that packets do not go out of one or another interface, that traffic is encrypted. tcpdump can do the same (except follow TCP traffic, which is very enlightning for users who like telnet).

    So while Ethereal does not increase security by itself, it does add security by making it possible to check out the packets. That makes is IMHO a security tool.