Vulnerability Management with Nessus
1h 42mIntermediate2024-07-11
Authors
Mike Chapple
Teaching Professor at the University of Notre Dame
Course details
It only takes one misconfigured device or missing patch for hackers to infiltrate your network. Fix the flaws in your systems before attackers can find them with Nessus, the network vulnerability scanner popular among cybersecurity analysts, sys admins, and network engineers. Using Nessus, you can scan servers, endpoints, and other network devices and check them against a database of thousands of known vulnerabilities. In this course, instructor Mike Chapple teaches you how to install Nessus, configure scans, and interpret the output. He explains how to create a vulnerability management program as well as a remediation workflow that will help you detect, understand, and resolve vulnerabilities before they are exploited.
Skills covered
NessusTenableSecurity TestingVulnerability ManagementCybersecurityDeep Dive (X:Y)
Concepts
Introduction
- Managing vulnerabilities with Nessus
- What you need to know
Setting Up Nessus
- Nessus editions
- Installing Nessus Manager on Linux
- Installing Nessus Manager on Windows
- Accessing the Nessus console
Creating a Vulnerability Management Program
- What is vulnerability management
- Identify scan targets
- Scan frequency
Configuring and Executing Vulnerability Scans
- Scan configuration
- Scan perspective
- Scanner maintenance
Remediating Vulnerabilities
- Report scan results
- Prioritize remediation
- Create a remediation workflow
- Barriers to vulnerability remediation
Analyzing Scan Results
- SCAP
- CVSS
- Interpreting CVSS scores
- Analyzing scan reports
- Correlating scan results
Common Vulnerabilities
- Server vulnerabilities
- Endpoint vulnerabilities
- Network vulnerabilities
- Preventing SQL injection
- Understanding cross-site scripting
- Request forgery
- Overflow attacks
- Code execution attacks
- Privilege escalation
- OWASP Top Ten
- Defending against directory traversal
- Race condition vulnerabilities
Conclusion
- Next steps