Identifying security holes

A few weeks ago, my Wired Windows column ("Securing Your IP Network Future ," Feb. 23) was about the deficiencies in many of the current intruder detection security packages. Now, one of the major suppliers of intruder detection systems has taken a new approach that overcomes some of these deficiencies - using methods pioneered by the antivirus and desktop management vendors.

Internet Security Systems (ISS) is releasing a major update to its Internet Scanner package that lets Windows NT and Unix users assess their network security vulnerabilities while actively protecting their information from hacker attacks. Internet Scanner 5.0 features a wide range of security reporting capabilities and performance enhancements, and a significant number of new Windows NT and Unix vulnerability checks.

Through the use of a unique security engine containing a comprehensive and dynamic database of attacker methods and security vulnerabilities, Internet Scanner can identify most security holes automatically. ISS will provide regular vulnerability updates as well as necessary corrective actions, so users can be assured that they are protecting their networks with the latest security vulnerability information.

ISS claims that Internet Scanner is the only software available that thoroughly evaluates the security of an entire enterprise network and intranet - including all Unix, Windows NT and Windows 95 machines, as well as firewalls, Web servers, routers and applications - and responds with detailed corrective actions, prioritized by the extent of the security risk.

You can download an evaluation copy of the software at www.iss.net.

Virtual Quill is a writing agency serving the computer and networking industries. If your target customer doesn't know your product, doesn't know its uses and doesn't know he needs it, he's not going to buy it. From books to reviews, marketing to manuals, VQ can help you and your business. Virtual Quill - "words to sell by..." Find out more at www.vquill.com, or by e-mail at info@vquill.com.

Policing your network
A review of four security auditing tools for NetWare and NT. Network World, 12/16/96.

Insertion, Evasion, and Denial of Service: Eluding Network Intrusion Detection
White paper from Secure Net that discusses issues with intrusion detection methods.

Air Force takes evasive action against hackers
110 bases to get network control centers, firewall "barrier reef." Network World, 10/10/97.

Anatomy of a friendly hack
How to assess your enterprise security, correct vulnerabilities and thwart attacks. Network World, 2/2/98.

Subscribe to this and other free Network World Fusion Focus newsletters