There would be several "topics" and/or categories in the best practices arena. That is why I mentioned small, medium and large. There are different techniques for different types of networks and different reasons that you might run a Vulnerability scanner. For example, are you testing the ability for certain IDS's to catch the attacks? Are you testing to see if honeypots are working, or simple-host-scan detectors. Are you scanning an MS only network? Are you looking for all types of OSes? (although some things are better done with nmap alone, and this could be included in the case studies/best practices.
The reason I brought it up in the first place is that besides being a consultant and format CTO/CSO of a company, I am also an instructor. I have found this product to be of great interest to all those in the security field and have taught the product as an "add on" to anyone's security toolkit. The problem is, with the exception of "articles" written in a few magazines from time to time, the real world studies are VERY limited. Just trying to add more value to one of the best Vulnerability scanners out there.. peace, Kat On Thu, 2003-11-20 at 11:46, Jesse W. Asher wrote: > What exactly do you mean by best practices? Under what circumstances? > What kind of environment are you talking about? What types of systems? > What type of network topology? The term "best practices" has become a > highly abused and overused term of late. > _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
