Vulnerability Scanners Capabilities for Detecting Windows Missed Patches: Comparative Study | SpringerLink
Skip to main content
Springer Nature Link
Log in

Vulnerability Scanners Capabilities for Detecting Windows Missed Patches: Comparative Study

  • Conference paper
Advances in Security of Information and Communication Networks (SecNet 2013)

Part of the book series: Communications in Computer and Information Science ((CCIS,volume 381))

Abstract

Vulnerability scanners are automated tools that define, identify, and classify security holes (vulnerabilities) in a computer, server, network, or communications infrastructure. Scanners discover missed patches on target systems and report related vulnerabilities. Many of the current information security systems use vulnerability scanners as the main part in the risk assessment process. Others depend on the scanners output in the systems patch management. This paper assesses the effectiveness of depending on vulnerability scanners in the information security management system. It compares between four of the leading vulnerability scanners in the market and carries out a study of their effectiveness in detecting missed patches.

The results show the severity of relying on vulnerability scanners to discover system patches status. A number of false positive and false negative detections for the system patches are reported by each of the tested scanners. The severe level for some of the unreported missed patches ranked as critical that puts the system in a high risk and makes it vulnerable for different attacks.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Log in via an institution

Subscribe and save

Springer+ Basic
¥17,985 /Month
  • Get 10 units per month
  • Download Article/Chapter or eBook
  • 1 Unit = 1 Article or 1 Chapter
  • Cancel anytime
Subscribe now

Buy Now

Chapter
JPY 3498
Price includes VAT (Japan)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
JPY 5719
Price includes VAT (Japan)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
JPY 7149
Price includes VAT (Japan)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Similar content being viewed by others

References

  1. Microsoft Corporation: Microsoft Security Update Guide. 2nd edn. (June 2011)

    Google Scholar 

  2. Nist, Aroms, E.: NIST Special Publication 800-115 Technical Guide to Information Security Testing and Assessment. CreateSpace, Paramount, CA (2012)

    Google Scholar 

  3. Danforth, M.: Scalable patch management using evolutionary analysis of attack graphs. In: Proceedings of the 2008 Seventh International Conference on Machine Learning and Applications, ICMLA 2008, pp. 300–307. IEEE Computer Society, Washington, DC (2008)

    Chapter  Google Scholar 

  4. Souppaya, M., Scarfone, K.: Guide to enterprise patch management technologies. National Institute of Standards and Technology, NIST SP 800-40 (September 2012)

    Google Scholar 

  5. Yang, G., Chen, D., Xu, J., Zhu, Z.: Research of intrusion detection system based on vulnerability scanner. In: 2010 2nd International Conference on Advanced Computer Control, ICACC, pp. 173–176 (2010)

    Google Scholar 

  6. Kavanagh, K.: Marketscope for vulnerability assessment. Gartner, Inc. (August 2011) G00230435

    Google Scholar 

  7. Kavanagh, K., Nicolett, M.: Marketscope for vulnerability assessment. Gartner, Inc. (April 2011) G00211846

    Google Scholar 

  8. Nilsson, J., Virta, V.: Vulnerability scanners. Royal Institute of Technology, Stockholm (2006)

    Google Scholar 

  9. Wack, J., Tracy, M., Souppaya, M.: Guideline on network security testing. National Institute of Standards and Technology, NIST SP 800-42 (October 2003)

    Google Scholar 

  10. Beale, J., Deraison, R., Meer, H., Temmingh, R., Walt, C.V.D.: Nessus Network Auditing. Syngress Publishing (2004)

    Google Scholar 

  11. Microsoft: Microsoft baseline security analyzer v2.2 (July 2010), http://microsoft.com/en-us/download/details.aspx?id=7558

  12. McAfee: Mcafee vulnerability manager v7.5 (December 2012), http://www.mcafee.com

  13. BeyondTrust: Retina network security scanner v5.18 (2012), http://beyondtrust.com

  14. Rapid7: Nexpose vulnerability management v5.5.12 (2012), http://www.rapid7.com

  15. Tenable: Nessus vulnerability scanner v5.0.2 (February 2012), http://www.tenable.com

Download references

Author information

Authors and Affiliations

  1. Department of Computer Science and Engineering, Faculty of Electronic Engineering, Menoufia University, Menoufia, Egypt

    Mohamed Alfateh Badawy, Nawal El-Fishawy & Osama Elshakankiry

Authors
  1. Mohamed Alfateh Badawy
    View author publications

    You can also search for this author in PubMed Google Scholar

  2. Nawal El-Fishawy
    View author publications

    You can also search for this author in PubMed Google Scholar

  3. Osama Elshakankiry
    View author publications

    You can also search for this author in PubMed Google Scholar

Editor information

Editors and Affiliations

  1. Faculty of Engineering, Faculty of Engineering, Al Azhar University, 83513, Qena, Egypt

    Ali Ismail Awad

  2. Department of Information Technology, Cairo University, 5 Dr. Ahmed Zewail Street, 12613, Giza, Cairo, Egypt

    Aboul Ella Hassanien

  3. Library, Kyushu University, 10-1, Hakozaki 6, Higashi-ku, 812-8581, Fukuoka, Japan

    Kensuke Baba

Rights and permissions

Reprints and permissions

Copyright information

© 2013 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Badawy, M.A., El-Fishawy, N., Elshakankiry, O. (2013). Vulnerability Scanners Capabilities for Detecting Windows Missed Patches: Comparative Study. In: Awad, A.I., Hassanien, A.E., Baba, K. (eds) Advances in Security of Information and Communication Networks. SecNet 2013. Communications in Computer and Information Science, vol 381. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-40597-6_16

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-40597-6_16

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-40596-9

  • Online ISBN: 978-3-642-40597-6

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics

Search

Navigation