Best Tools for a Secure Network

There are multiple points of vulnerability in any network. Getting to know the weakness and installing solutions can help in securing the network. Also important is a continuous process of monitoring and administration such that new threats that can be identified and prevented. Data security software and other encryption software secure the information such that even if security is breached the data obtained is meaningless without proper decryption and proper password string. Network security policy and the various network security tools help in identifying and planning a more secure working environment.

Administrator tools

For web application or for any networks the administrator is responsible for security of the server and the other PC’s in the network. The major issues are access lists and monitoring the access. Log files and logs of activity also convey a lot of information. But sadly these are taken only after the attack has come and gone. Any immediate damage cannot be controlled.

Monitoring is done by network security tool that check for activity. Intrusion detection systems and process monitoring is a better way. Process enumeration shows up the various processes that are running. Viruses, Trojans, rootkits and other host infections show up in the process enumeration. You could look up the Windows task manager or even choose third party software to do the job for you.

• Fport maps all the ports and the applications that use the port. This enables a PID with process name and path of the application software. This scan can quickly show you the open ports and the processes that are using these ports.
• PSTools suite is a package that is used to kill processes. It has a command line interface. PSTools is a favorite of network administrators and Hackers alike. It can execute remoter processes. It displays the SID of a computer or user. After listing a detailed information about the processes running on the machine it can do a number variety of things like changing passwords, dumping log records, viewing control services, and suspending processes.
• Tlist is a task viewer provided along with Microsoft resource kit. IT displays the names and ID of processes that are running on the local computer. Its advantage is that it allows you to see where the program is located within the server. Once identified another tool is used to kill the program.
• Task list displays the list of applications and services running on a local or remote computer. This is in windows XP.
• Process Killing is difficult to perform. Windows does not allow deletion of files while a process is running. Killing the process before deletion would be the means of getting rid of unauthorized processes. PsKill.exe, Kill.exe, Taskkill are some tools that allow you to kill a process.

Continue to : Monitoring using network security scanners

Related Articles

What Are "Security Handbooks": site/Internet by IETF?
Network Security: Sites, Forums and Tools That Help You
How to Eliminate Major Security Concerns for SME's?