Netshield Announce Our New Vulnerability Scanning Service, NetScan.

NetScan is a popular and capable infrastructure and web application vulnerability scanner, providing the ability to carry out regular scanning to identify vulnerabilities before they become a huge business security risk.

First Class Scanning.

Unpatched software, configuration weaknesses and software vulnerabilities also need to be managed effectively. NetScan includes a vulnerability assessment module to perform vulnerability scans across your external network infrastructure.

• Access sophisticated scanning and exploit technology designed by experienced penetration testers
• Provides a single platform to identify and manage web application and infrastructure risk
• Confirms vulnerabilities through safe exploitation to eradicate false positives and provide proof of concept
• Prioritise each vulnerability’s remediation
• Generates reports in Microsoft Word and CSV. PCI and UK Government PSN compatible formats
• Schedule scans to run at any given date and time. Scan at regular recurring intervals with email notification.

Web Applications.

Vulnerabilities within web applications pose a significant threat to your organisation’s network security. NetScan can identify all known web application vulnerabilities and provide exploit capabilities to demonstrate their impact and eradicate false positives.

Many existing web application scanners rely on parsing web pages in order to discover application components (e.g. links and forms). This approach is no longer effective when testing modern web 2.0 based applications. Components generated at runtime using JavaScript, Flash or Silverlight components will remain invisible to traditional discovery techniques.

NetScan employs two integrated crawling technologies to overcome this challenge. Our HTTP/HTML based crawler is used to components quickly and to identify hidden components through forced browsing. A second integrated crawling engine then executes web pages in the same way a normal browser would. Any embedded scripts or components then able to run as intended whilst allowing full visibility to the discovery engine. If a modern web browser such as Google Chrome can access the application, NetScan can crawl it.

• Thorough assessment of all known web application vulnerability classes such as those defined within the OWASP top ten.
• Advanced detection of DOM based Cross Site Scripting (XSS) vulnerabilities through JavaScript taint analysis.
• Decompilation and static analysis of Adobe Flash files.
• HTML5 postMessage analysis. • Confirmation of discovered flaws through safe vulnerability exploitation

Identifying False Positives.

A false positive is where a vulnerability scanner indicates there is a vulnerability when in fact there isn’t one. Sorting through scanner results to determine which reported issues are real and which are false positive is a time-consuming process. To eliminate false positives, and to provide proof of concept evidence, NetScan employs safe custom exploit techniques to actively confirm discovered vulnerabilities.

Third Party Applications Download custom filtered results and view via HTML, Docx or CSV. NetScan includes a simple JSON data API for retrieving, aggregating, processing and reporting raw vulnerability data for use in third party applications.

Complex authentication schemes are supported when NetScan is supplied with the minimal information, such as a username and password pair. Optionally, a login URL may be provided to direct the scanner where to use the credentials and for scenarios such as single sign-on. The scanner may easily be adapted to support bespoke authentication schemes that require non-standard credentials or processes.

NetScan can provide comprehensive vulnerability assessment and analysis against remote hosts to determine if a misconfiguration exists that could allow an attack to get behind the application and into sensitive data.

Please call us to discuss any aspect of your IT Requirements on 0333 200 1636 or visit our website http://www.netshield.net to find out more about the ways that our expert support and advice will improve the health of your IT.

Advertisements

Windows XP – not long to go until…

From April 8th 2014 the support for Microsoft Windows XP will be ending. So it is nearly time to say goodbye to the popular decade-old operating system.

The end of support means, users will no longer receive anymore security updates. This will lead to security and privacy implications that can significantly impact businesses – without the updates systems may be vulnerable to harmful viruses, spyware and other malicious software.

If using an unsupported operating system, other software and hardware products on the system may also not be support by the vendors either. It will also make it difficult to purchase new software and hardware for the retired Window XP operating system.

Due to the lack of updates, supporting software and hardware, it could lead to users experiencing an increase of downtime and business disruption. To discuss the implications of the end of support for Windows XP in more detail or help with upgrading please contact us today.

Have you retired your Windows XP and upgrade to Window 7?

Last year we saw the launch of Window 8 and it completely changed the traditional interface of a Microsoft Operating System, like removing the start menu. There was also an announcement from Microsoft that the support for Windows XP will end in April 2014 after 13 years of service. So, you will not be able to receive any further updates/patches which could lead to the systems being less secure.

In recent research it has shown businesses who are looking to upgrade their systems now they will overwhelmingly choose Windows 7 over Windows 8 or Vista. It is the obvious choice because it is stable, secure, easy to use and compatible with a wide range of applications. The user experience also has a remarkably similar interface to XP which is helpful for less tech-savvy members of the team whereas, in Window 8 you will be faced with a board tiles on the homepage.

Here are our 7 advantages of Windows 7

1.Everything just seems easier
You’ll take to Windows 7 like a duck to water. Built-in troubleshooters help you fix printing issues, connect to networks and use multimedia and much more.

2. Get better security built-in.
It has a ‘Windows Defender’ built-in to boost the security of your computer against spyware and unwanted software. Alerts are simpler and easier to take action on. And Windows 7 also supports fingerprint readers to unlock your computer or device!

3. Have all your files instantly at hand.
Windows XP was a real workhorse, but Windows 7 works even harder. With an easy to use search bar, all your files and documents are instantly available when you need them.

4. Organise your wireless connections.
Windows 7 automatically remembers all your wireless connections so you’ll only need to set them up once.

5. Hassle-free backups.
Backups can be a pain, which is why Windows 7 has improved XP’s great ‘System Restore’ feature so it can now also backup automatically.

6. There’s no need to abandon older applications.
Continue to use your old applications because most of them (even though they were designed for Windows XP) will run perfectly with Windows 7 too.

7. Extend the life of your existing PC.
It’s what’s inside that counts and the same is true for your PC. You don’t need to upgrade your computer hardware to enjoy a faster and more efficient computer especially when the benefits of Windows 7 are just a click away.

However, there are positives of the Window 8 operating system too like speedy boot time, dynamic desktop, improve search function and Windows live syncing. But the differentiating feature is ‘Windows To Go’ as it offer users convenience allowing users to make a copy of their operating system complete with their settings, wallpapers files and even applications into a USB thumb drive.  So once you plug it into another computer with Windows 8, everything looks just like your desktop!!

But, the decision is yours.

For friendly advice on Windows, Operating Systems and more Contact Us today