Nessus (software)

Nessus Vulnerability Scanner
Developer(s) Tenable Network Security
Stable release
6.7 / May 19, 2016 (2016-05-19)[1]
Repository None available
Operating system Cross-platform
Type Vulnerability scanner
License Proprietary; GPL (2.2.11 and earlier)
Website Nessus Vulnerability Scanner Homepage

Nessus is a proprietary comprehensive vulnerability scanner which is developed by Tenable Network Security. It is free of charge for personal use in a non-enterprise environment.

According to surveys done in 2009 by sectools.org, Nessus is the world's most popular vulnerability scanner, taking first place in the 2000, 2003, and 2006 security tools survey.[2] Tenable Network Security estimated year 2005 that it was used by over 75,000 organizations worldwide.[3]

Operation

Nessus allows scans for the following types of vulnerabilities:

Initially, Nessus consisted of two main components; nessusd, the Nessus daemon, which does the scanning, and nessus, the client, which controls scans and presents the vulnerability results to the user. Later versions of Nessus (4 and greater) utilize a web server which provides the same functionality as the client.

In typical operation, Nessus begins by doing a port scan with one of its four internal portscanners (or it can optionally use AmapM[4] or Nmap[5]) to determine which ports are open on the target and then tries various exploits on the open ports. The vulnerability tests, available as subscriptions, are written in NASL(Nessus Attack Scripting Language), a scripting language optimized for custom network interaction.

Tenable Network Security produces several dozen new vulnerability checks (called plugins) each week, usually on a daily basis. These checks are available for free to the general public; commercial customers are not allowed to use this Home Feed any more. The Professional Feed (which is not free) also give access to support and additional capabilities (e.g. audit files, compliance tests, additional vulnerability detection plugins).

Optionally, the results of the scan can be reported in various formats, such as plain text, XML, HTML and LaTeX. The results can also be saved in a knowledge base for debugging. On UNIX, scanning can be automated through the use of a command-line client. There exist many different commercial, free and open source tools for both UNIX and Windows to manage individual or distributed Nessus scanners.

If the user chooses to do so (by disabling the option 'safe checks'), some of Nessus' vulnerability tests may try to cause vulnerable services or operating systems to crash. This lets a user test the resistance of a device before putting it in production.

Nessus provides additional functionality beyond testing for known network vulnerabilities. For instance, it can use Windows credentials to examine patch levels on computers running the Windows operating system, and can perform password auditing using dictionary and brute force methods. Nessus 3 and later can also audit systems to make sure they have been configured per a specific policy, such as the NSA's guide for hardening Windows servers. This functionality utilizes Tenable's proprietary audit files or Security Content Automation Protocol (SCAP) content.

History

The "Nessus" Project was started by Renaud Deraison in 1998 to provide to the Internet community a free remote security scanner.[6] On October 5, 2005, Tenable Network Security, the company Renaud Deraison co-founded, changed Nessus 3 to a proprietary (closed source) license.[3] The earlier versions appear to have been removed from the official website since then. The Nessus 3 engine is still free of charge, though Tenable charges $100/month per scanner for the ability to perform configuration audits for PCI, CIS, FDCC and other configuration standards, technical support, SCADA vulnerability audits, the latest network checks and patch audits, the ability to audit anti-virus configurations and the ability for Nessus to perform sensitive data searches to look for credit card, social security number and many other types of corporate data.

In July 2008, Tenable sent out a revision of the feed license which will allow home users full access to plugin feeds.[7] A professional license is available for commercial use.

The Nessus 2 engine and a minority of the plugins are still GPL, leading to forked open source projects based on Nessus like OpenVAS and Porz-Wahn.[6][8] Tenable Network Security has still maintained the Nessus 2 engine and has updated it several times since the release of Nessus 3.[6]

Nessus 3 is available for many different Unix-like and Windows systems, offers patch auditing of UNIX and Windows hosts without the need for an agent and is 2-5 times faster than Nessus 2.[9]

On April 9, 2009, Tenable released Nessus 4.0.0.[10] On February 15, 2012, Tenable released Nessus 5.0.[11] On October 14, 2014, Tenable released Nessus 6.0. [12] On July 25, 2016, Tenable released Nessus 6.8.1 [13]

See also

References

  1. ↑ "Nessus 6.7 Now Available". Retrieved 2016-07-14.
  2. ↑ "sectools.org". Retrieved 2009-10-21.
  3. 1 2 LeMay, Renai (2005-10-06). "Nessus security tool closes its source". CNet.
  4. ↑ http://freeworld.thc.org/thc-amap/
  5. ↑ http://www.nessus.org/documentation/index.php?doc=nmap-usage
  6. 1 2 3 Carey, Mark; Russ Rogers; Paul Criscuolo; Mike Petruzzi. Nessus Network Auditing. O'reilly. ISBN 978-1-59749-208-9.
  7. ↑ "Nessus feed letter" (PDF).
  8. ↑ "OpenVAS". Retrieved 2009-10-21.
  9. ↑ "Nessus 3 documentation".
  10. ↑ http://static.tenable.com/prod_docs/upgrade_nessus.html. Retrieved 2015-09-08. Missing or empty |title= (help)
  11. ↑ http://static.tenable.com/prod_docs/upgrade_nessus.html. Retrieved 2015-09-08. Missing or empty |title= (help)
  12. ↑ http://static.tenable.com/prod_docs/upgrade_nessus.html. Retrieved 2015-09-08. Missing or empty |title= (help)
  13. ↑ http://static.tenable.com/prod_docs/upgrade_nessus.html. Retrieved 2016-09-26. Missing or empty |title= (help)
This article is issued from Wikipedia - version of the 10/12/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.