Best Tools for a Secure Network
There are multiple points of vulnerability in any network. Getting
to know the weakness and installing solutions can help in securing
the network.
Also important is a continuous process of monitoring
and administration such that new threats that can be identified and
prevented. Data security software and other encryption software secure
the information such that even if security is breached the data obtained
is meaningless without proper decryption and proper password string.
Network security policy and the various network security tools help
in identifying and planning a more secure working environment.
Administrator tools
For web application or for any networks the administrator is responsible
for security of the server and the other PC’s in the network.
The major issues are access lists and monitoring the access. Log files
and logs of activity also convey a lot of information. But sadly these
are taken only after the attack has come and gone. Any immediate damage
cannot be controlled.
Monitoring is done by network security tool that check for activity.
Intrusion detection systems and process monitoring is a better way.
Process enumeration shows up the various processes that are running.
Viruses, Trojans, rootkits and other host infections show up in
the process enumeration. You could look up the Windows task manager
or even choose third party software to do the job for you.
- Fport maps all the ports and the applications that use
the port. This enables a PID with process name and path of the application
software. This scan can quickly show you the open ports and the
processes that are using these ports.
- PSTools suite is a package that is used to kill processes.
It has a command line interface. PSTools is a favorite of network
administrators and Hackers alike. It can execute remoter processes.
It displays the SID of a computer or user. After listing a detailed
information about the processes running on the machine it can do
a number variety of things like changing passwords, dumping log
records, viewing control services, and suspending processes.
- Tlist is a task viewer provided along with Microsoft resource
kit. IT displays the names and ID of processes that are running
on the local computer. Its advantage is that it allows you to see
where the program is located within the server. Once identified
another tool is used to kill the program.
- Task list displays the list of applications and services
running on a local or remote computer. This is in windows XP.
- Process Killing is difficult to perform. Windows does not
allow deletion of files while a process is running. Killing the
process before deletion would be the means of getting rid of unauthorized
processes. PsKill.exe, Kill.exe, Taskkill are some tools that allow
you to kill a process.
Continue to : Monitoring using network security
scanners
Related Articles
What Are "Security Handbooks": site/Internet by IETF?
Network Security: Sites, Forums and Tools That Help You
How to Eliminate Major Security Concerns for SME's?
Bookmark this page
Email this to your friend
Add this page to del.icio.us