Security Basics mailing list archives
RE: Scanning--more then one side to the argument
From: "Steve Fletcher" <safletcher () insightbb com>
Date: Wed, 30 Mar 2005 14:18:15 -0600
I have a question regarding this. Are you talking about doing an external scan or an internal scan? I assume an external, because an internal scan should show a LOT of open ports. I would say that any open port POTENTIALLY could be a security issue waiting to happen, but common sense dictates that some ports must be open for usability reasons. Plus, if you're going to follow this line of thought, the fact that the systems are connected to the Internet AT ALL poses a potential risk. Or, just being networked could be a risk. Or, being powered on poses a potential risk. So, based on this, sure it COULD be a security risk waiting to happen, but more information needs to be gathered to determine the true extent of the risk. And, it must be reevaluated at regular intervals to catch new issues that might have come up since the last scan. What is safe now might not be 6 months from now. Hope this helps. Steve Fletcher MCSE (NT4/Win2k), MCSE: Security (Win2k), HP Master ASE, CCNA, Security+ safletcher () insightbb com -----Original Message----- From: Sherman Hand [mailto:shand () adelphia net] Sent: Wednesday, March 30, 2005 5:05 PM To: security-basics () securityfocus com Subject: Scanning--more then one side to the argument There has been a on going discussion about the scanning results on our customers. Thought one says that "any" port on a standard nmap, showing as "open" is a security risk. Thought two says, no since some things need to show in a state of open. Should we be stating that through proactive scan, when we find any port showing as open, that it is a security issue waiting to happen? Or only if we can show a issue? Thoughts? Shand --------------------------------------------------------------------------- Earn your MS in Information Security ONLINE Organizations worldwide are in need of highly qualified information security professionals. Norwich University is fulfilling this demand with its MS in Information Security offered online. Recognized by the NSA as an academically excellent program, NU offers you the opportunity to earn your degree without disrupting your home or work life. http://www.msia.norwich.edu/secfocus_en ----------------------------------------------------------------------------
Current thread:
- Scanning--more then one side to the argument Sherman Hand (Mar 30)
- Re: Scanning--more then one side to the argument Barrie Dempster (Mar 31)
- RE: Scanning--more then one side to the argument Steve Fletcher (Mar 31)
- <Possible follow-ups>
- Re: Scanning--more then one side to the argument Shand (Mar 31)
- RE: Scanning--more then one side to the argument Steve Fletcher (Mar 31)
- Re: Scanning--more then one side to the argument Shand (Mar 31)
- RE: Scanning--more then one side to the argument Steve Fletcher (Mar 31)