Discover vulnerabilities with Google Tsunami Before the Wave
ADMIN Network & Security|ADMIN #74: Software-Defined Networking
Google Tsunami security scanner detects errors that typically signal danger and outputs alerts. We look into how you can get the tool up and running and even write the required plugins yourself.
- Martin Loschwitz
Discover vulnerabilities with Google Tsunami Before the Wave

Identifying and fixing security vulnerabilities before an attacker exploits them is one of the most difficult tasks an administrator faces. Virtually any infrastructure component can become a target for crooks. Web applications, with their cornucopia of cross-site scripting (XSS) and other injection attacks, are a problem, as are systems with unpatched software, insecure user accounts, misconfigured firewalls, poorly protected network devices, and so on. At the same time, IT setups are becoming increasingly complex, comprising increasing numbers of components. What’s more, sometimes you do not know exactly what components you are dealing with locally. The best way to prevent attacks is to identify and eliminate security risks before an attack happens. Of course, you cannot hope to do this manually if you have thousands or more virtual instances running the most diverse software zoo imaginable in your company data center. The only tools that can help you there are those that automatically query entire networks or hosts and search for specific vulnerabilities.

Google comes to the aid with its Tsunami [1] offering. Because it is not an official project, Google does not provide any support. That said, Tsunami is now available under the Apache license on GitHub, and the tool can be used without any further Google involvement.

Tsunami

この蚘事は ADMIN Network & Security の ADMIN #74: Software-Defined Networking 版に掲茉されおいたす。

7 日間の Magzter GOLD 無料トラむアルを開始しお、䜕千もの厳遞されたプレミアム ストヌリヌ、9,000 以䞊の雑誌や新聞にアクセスしおください。

この蚘事は ADMIN Network & Security の ADMIN #74: Software-Defined Networking 版に掲茉されおいたす。

7 日間の Magzter GOLD 無料トラむアルを開始しお、䜕千もの厳遞されたプレミアム ストヌリヌ、9,000 以䞊の雑誌や新聞にアクセスしおください。

ADMIN NETWORK & SECURITYのその他の蚘事すべお衚瀺
Manage projects in SMEs with OpenProject Best-Laid Plans
ADMIN Network & Security

Manage projects in SMEs with OpenProject Best-Laid Plans

OpenProject supplies sensible, comprehensive project management for SMEs with few financial inputs.

time-read
10 分  |
ADMIN #75: Teamwork
Synchronize passwords in KeePass Digital Safe
ADMIN Network & Security

Synchronize passwords in KeePass Digital Safe

Usernames and passwords play an important role in security. In this article, we show you how to set up the KeePass password manager and keep it synchronized across multiple devices.

time-read
9 分  |
ADMIN #75: Teamwork
Test mechanisms for best practices in cloud design Best Clouds
ADMIN Network & Security

Test mechanisms for best practices in cloud design Best Clouds

Develop resilient and efficient cloud infrastructures for enterprise applications with the AWS Well-Architected Framework. We show you how to implement the solutions from the framework in practical terms by providing an introduction to the AWS Well-Architected tool with an example.

time-read
9 分  |
ADMIN #75: Teamwork
Six new security features Windows Server 2022 for Shielded
ADMIN Network & Security

Six new security features Windows Server 2022 for Shielded

Configure the Secured-core server components to reduce the attack surface of your system with minimal overhead.

time-read
10+ 分  |
ADMIN #75: Teamwork
Cooperation with Cyn.in Fast Action
ADMIN Network & Security

Cooperation with Cyn.in Fast Action

Cyn.in open source groupware focuses on connecting employees quickly and easily. We show you how to set up a Cyn.in environment, exchange knowledge, collaborate on projects, and manage processes. By Holger Reibold

time-read
7 分  |
ADMIN #75: Teamwork
Passkeys eliminate the need for password-based authentication Password Overboard!
ADMIN Network & Security

Passkeys eliminate the need for password-based authentication Password Overboard!

Passwords are becoming a thing of the past. We look into the basic weaknesses of passwords, explain what passkeys are all about, and assess their practicality.

time-read
5 分  |
ADMIN #74: Software-Defined Networking
Best practices when working with Docker images Shipshape
ADMIN Network & Security

Best practices when working with Docker images Shipshape

Whether you are developing containerized applications or running them, observing best practices helps to obtain optimal results.

time-read
7 分  |
ADMIN #74: Software-Defined Networking
Monitoring changes in Active Directory with built-in tools Tracking Down Attackers
ADMIN Network & Security

Monitoring changes in Active Directory with built-in tools Tracking Down Attackers

Monitoring with built-in Windows tools can prevent the worst from happening after an attempted attack.

time-read
4 分  |
ADMIN #74: Software-Defined Networking
Discover vulnerabilities with Google Tsunami Before the Wave
ADMIN Network & Security

Discover vulnerabilities with Google Tsunami Before the Wave

Google Tsunami security scanner detects errors that typically signal danger and outputs alerts. We look into how you can get the tool up and running and even write the required plugins yourself.

time-read
10 分  |
ADMIN #74: Software-Defined Networking
Containers made simple Fully Automated
ADMIN Network & Security

Containers made simple Fully Automated

The Portainer graphical management interface makes it easy to deploy containers, relieving you of huge amounts of routine work you would normally have to handle with Docker, Podman, or Kubernetes. However, the licensing structure leaves something to be desired.

time-read
10+ 分  |
ADMIN #74: Software-Defined Networking