1. 2004, Jei Nessus A Vulnerability Assessment tool A Security Scanner Information Networking Security and Assurance Lab National Chung Cheng University http://www.nessus.org

2. Outline Description & Feature Operation mode Installation Example 1 (Unix-base) Example 2 (Windows-base) Summary Information Networking Security and Assurance Lab National Chung Cheng University

3. Outline Description & Feature Operation mode Installation Example 1 (Unix-base) Example 2 (Windows-base) Summary Information Networking Security and Assurance Lab National Chung Cheng University

4. Description The “Nessus” security scanner is a software which will audit remotely a given network and determine whether someone (or something - like a worm) may break into it, or misuse it in some way Information Networking Security and Assurance Lab National Chung Cheng University

5. Feature Free Powerful Fast Modular architecture Reliable Up-to-date (#nessus-update-plugins) Information Networking Security and Assurance Lab National Chung Cheng University

6. Outline Description & Feature Operation mode Installation Example 1 (Unix-base) Example 2 (Windows-base) Summary Information Networking Security and Assurance Lab National Chung Cheng University

7. Information Networking Security and Assurance Lab National Chung Cheng University WWW FTP Mail Proxy Nessus Server-nessusd Nessus Client

8. Outline Description & Feature Operation mode Installation Example 1 (Unix-base) Example 2 (Windows-base) Summary Information Networking Security and Assurance Lab National Chung Cheng University

9. Environment Version  2.2.0 Platform  Intel X86 OS  Debian GNU/Linux Compiler  gcc-2.95 Information Networking Security and Assurance Lab National Chung Cheng University

10. Three Choices!! The easy and dangerous way!! The easy and less dangerous way!! Information Networking Security and Assurance Lab National Chung Cheng University The Debian fast way!!

11. Start Information Networking Security and Assurance Lab National Chung Cheng University

12. Add User The command User name The way of auth Type the password The rule set for the user

13. Start nessusd Information Networking Security and Assurance Lab National Chung Cheng University Run the nessusd as daemon!! Loading the plugins

14. Outline Description & Feature Operation mode Installation Example 1 (Unix-base) Example 2 (Windows-base) Summary Information Networking Security and Assurance Lab National Chung Cheng University

15. Internet The router of EE The router of CCU The router of ISU WJL.ee.ccu linux.ee.isu Environment

16. Configuration of nessus client

17. Start the scan Information Networking Security and Assurance Lab National Chung Cheng University

18. Report Information Networking Security and Assurance Lab National Chung Cheng University

19. Report with HTML Format Information Networking Security and Assurance Lab National Chung Cheng University

20. Outline Description & Feature Operation mode Installation Example 1 (Unix-base) Example 2 (Windows-base) Summary Information Networking Security and Assurance Lab National Chung Cheng University

21. Internet The router of EE The router of CCU The router of ISU WJL.ee.ccu linux.ee.isu Environment

22. Description NessusWX is a client program for Nessus security scanner which is designed specially for Windows platform Version  1.4.4 Download  http://nessuswx.nessus.org/archive/nessuswx- 1.4.4.zip Information Networking Security and Assurance Lab National Chung Cheng University

23. Setting

24. Connect to nessus server Information Networking Security and Assurance Lab National Chung Cheng University

25. Create a session

26. Execute

27. View the result

28. Report with HTML Format

29. Export to the MySQL Database (1/4) First  Let the user can access database from the location Information Networking Security and Assurance Lab National Chung Cheng University The SQL command

30. Export to the MySQL Database (2/4) Second  Create the database and the tables (create_tables.txt) Information Networking Security and Assurance Lab National Chung Cheng University

31. Export to the MySQL Database (3/4) Information Networking Security and Assurance Lab National Chung Cheng University

32. Export to the MySQL Database (4/4)

33. Outline Description & Feature Operation mode Installation Example 1 (Unix-base) Example 2 (Windows-base) Summary Information Networking Security and Assurance Lab National Chung Cheng University

34. An ounce of prevention is better than a pound of cure Information Networking Security and Assurance Lab National Chung Cheng University