We have been collecting data on security breaches, vulnerabilities, and attitudes towards security. One conclusion we derived from analyzing this data is there were far less security problems, that we knew of, in 1995 than today. What is so different about today that 1995? One major difference is SATAN is not as widely used. The controversial security tool by notable cyber cafe attendees Dan Farmer and Wietse Venema.
We decided to take action:
Today we are announcing Satan-as-A-Service.
SATAN running on a deployable image of Kali Linux:
We are staying faithful to the original vision of SATAN. Ou first action will be to finish this TODO list:
TODO list for future (SATAN version 1.1, 2.0, whatever)
----------------------------------------------------------
o Enable SATAN to fork and run several scans in parallel
o Talk about sending mail/syslog to each host scanned
o Look at and deal with subnet masks properly...
o Put in a DNS walker
o fix rex client strategy (rex client is currently not being used)
o get a more complete list of banners from vendors and Internet
on what is vulnerable and not, for the rules/* files.
o many more bug tests, etc.
o Add AFS testing support; currently there is none
o Add SNMP testing/probing
And most importantly:
o MAPS! Big graphical maps that can *show* the relationships
and are clickable to let users zoom into things, etc...
2 comments:
netscape 3.0 was actually a good touch.
It was a joke? Dang. We could use it, for real...
Post a Comment