Aggregating vulnerability report data?

From: ahecker@evilscientist.com
Date: Thu Mar 13 2003 - 18:18:11 EST


Folks,

Been googling for an answer to this for a number of weeks now, but have had no success, so I figured I'd toss it out to the forum & see what y'all think.

I've been involved in doing vulnerability assessments (and penetration tests) for some time now; I use *both* nessus and ISS Internet Security Scanner, but have yet found a way to correlate and aggregate their information into one comprehemsive document. The only thing I've seen that even purports to do something like this is the HArris STATAnalyzer, but I can't get any real, solid info on *it*, either.

Anyone have any pointers for me? It'd be much appreciated.

- Alan

-- 
"Never send a Monster to do the work of an Evil Scientist."
----------------------------------------------------------------------------
Did you know that you have VNC running on your network? 
Your hacker does. Plug your security holes now! 
Download a free 15-day trial of VAM:
http://www2.stillsecure.com/download/sf_vuln_list.html


This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:30 EDT