How to Perform a Technical Network Vulnerability Assessment

Justin Peltier

With the proliferation of connected networks in which it is common for an organization to have connected their resources to intranets, extranets and the Internet, the number of potential malicious users grows exponentially.

In order for an organization to combat the likelihood of service interruption and corruption of data, periodic vulnerability assessments are essential.

In this two-day, demonstrative workshop, we will examine how to conduct a cost-effective vulnerability assessment, beginning with time-maximization techniques up to and including all the tools of the trade.

This seminar is targeted toward the technicians who will be running the tools, interpreting the results, and proposing corrective actions.

A demonstration of the most popular tools and how to obtain them will be included.

This class includes discussion on the current security testing methodologies, including the Open Source Security Testing Methodology Manual (OSSTMM), the National Institute for Standards & Technology (NIST) standard, and the Common Criteria Security Testing standard.

Apart from the new standards we will also cover the latest legislation regarding network vulnerability assessment, including the Gramm Leach Bliley Act (GLBA), Health Insurance Portability and Accountability Act, and also ISO-17799 standards.

The class also now includes a module on social engineering testing for the network vulnerability assessment tester.