Monday, July 23, 2012

Acunetix Vulnerability Scanner

By Rhonda Benjamin


Just because you think your data is safe does not mean your database of sensitive organization information has not already been cloned and is resident elsewhere ready to be sold to the highest bidder. To make matters worse, only recently, it has been discovered that hackers are not simply selling your information, they're also selling the fact that you have vulnerabilities to others be they hackers, industrial spies or terrorists. You need an Acunetix vulnerability scanner to help.

It all sounds apocalyptic, doesn't it? Well, rather than being an angel of doom, I'll let the stats speak for themselves.TJX Companies Inc. TJX Companies, owners of T.J. Maxx, Marshalls, Winners, HomeGoods, A.J. Wright, and Bob's stores, on the 17th January this year, disclosed that 40 million of their customers' credit and debit card details were stolen. In parallel, federal credit union SEFCU published a similar warning that the personal details of 10,000 of its customers were compromised in the hack attack.

Eliminating vulnerabilities will require either 'remediation' - typically a software upgrade or patch for program or OS files - or 'mitigation' - a configuration settings change. Hardening is required equally for servers, workstations and network devices such as firewalls, switches and routers. How do I identify Vulnerabilities? A Vulnerability scan or external Penetration Test will report on all vulnerabilities applicable to your systems and applications. You can buy in 3rd Party scanning/pen testing services - pen testing by its very nature is done externally via the public internet as this is where any threat would be exploited from.

In January 2007, the University of Arizona reported a breach happening November and December last year that effected several services according to the Privacy Clearing House. The number of effected records is as yet undisclosed. In December 2006, University of Colorado - Boulder experienced a hack attack that resulted in the theft of thousands of names and social security numbers - a total of 17,500 records were compromised. University of Texas, Dallas, reported in December 2006 that the data of 35,000 individuals (current students and alumni) was compromised. Social security numbers were exposed, according to the Privacy Clearing House.

Acunetix vulnerability scanners will comprehensively protect a web base application against a SQL injection attack. This approach in conjunction with thorough testing as one of the final stages of web development, together with regular testing and security reviews should be sufficient to protect against this SQL injection.




About the Author:



No comments:

Post a Comment