Paper Info
Title
Performance of automated network vulnerability scanning at remediating security issues
Abstract
This paper evaluates how large portion of an enterprises network security holes that would be remediated if one would follow the remediation guidelines provided by seven automated network vulnerability scanners. Remediation performance was assessed for both authenticated and unauthenticated scans. The overall findings suggest that a vulnerability scanner is a usable security assessment tool, given that credentials are available for the systems in the network. However, there are issues with the method: manual effort is needed to reach complete accuracy and the remediation guidelines are oftentimes very cumbersome to study. Results also show that a scanner more accurate in terms of remediating vulnerabilities generally also is better at detecting vulnerabilities, but is in turn also more prone to false alarms. This is independent of whether the scanner is provided system credentials or not.
Year
DOI
Venue
2012
10.1016/j.cose.2011.12.014
Computers & Security
Keywords
Field
DocType
vulnerabilities,network security,vulnerability remediation,vulnerability detection,security tools,information systems
Information system,USable,Internet privacy,Authentication,Vulnerability (computing),Vulnerability assessment,Computer science,Computer security,Network security,Vulnerability management,Vulnerability
Journal
Volume
Issue
ISSN
31
2
0167-4048
Citations 
PageRank 
References 
7
0.66
14
Authors
1
Name
Order
Citations
PageRank
Hannes Holm119114.59