Re: SSN Scanning

[Joel Rosenblatt <joel () COLUMBIA EDU>]

We are using modified versions of Cornell Spider(3 and 4) - we have 2 versions, one does a silent scan and reports back to a secure server on what it finds, 
the other is a do-it-yourself version that people use to scan their own machines and fix what they find.

Joel Rosenblatt

Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel


--On Thursday, June 17, 2010 1:49 PM -0400 Allison Dolan <adolan () MIT EDU> wrote:

> How are you doing your scans now?  (IdentityFinder Enterprise with Console  has reporting capability)
>
> Allison F. Dolan
> Program Director, Protecting Personally Identifiable Information
> Massachusetts Institute of Technology
> 77 Massachusetts Ave  NE49-3021
> Cambridge MA 02139-4307
> Phone: (617) 252-1461
> http://mit.edu/infoprotect
>
>
>
> On Jun 17, 2010, at 9:39 AM, James R. Pardonek wrote:
>
> > I'm curious as to what methods everyone is using to compile and
> > summarize
> > reporting on the results of SSN scans.  We are struggling to  come
> > up with a
> > report format that is not a pain to fill out and that management can
> > understand.
> >
> > Thanks,
> >
> > James R. Pardonek, CISSP
> > Senior Network Administrator
> > Purdue University Calumet Data Network
> > Information Services
> > Purdue University Calumet
> > Hammond, Indiana



Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel