New Free Tool: AppSense Security Analyzer
Friday, 07 April 2006 by Michel Roth
AppSense Security Analyzer conducts a comprehensive analysis of a system by attempting to run unauthorized applications and perform various non-disruptive activities on the PC, notebook or server. The degree to which it is able to successfully complete these actions indicates the level of risk faced by that device. In less than 30 seconds, AppSense Security Analyzer creates a report that not only identifies where potential vulnerabilities exist, but also provides guidance on how they can best be addressed.

Common vulnerabilities that AppSense Security Analyzer can expose include the ability for users to:

• Introduce malicious or damaging executable files or be tricked into introducing them
• Modify unprotected registry keys or add new registry data
• Download files with altered file extensions, thus introduce executable files
• Access low level utilities to compromise system stability
• Run .VBS files which are commonly used for malicious purposes such as virus proliferation
• Inadvertently provide knowledge of the network to a malicious user, allowing them to exploit vulnerabilities

Count on the list of vulnerabilities that are tested to be expanded in the near future. The AppSense Security Analyzer is available for free download. Download here.

Related Items:

AppSense Calls Time On Poor System Management (12 July 2005)
Four unpatched Windows vulnerabilities disclosed wμth PoC (24 December 2004)
Microsoft Standard User Analyzer Updated (27 September 2006)
VMware ESX Server Multiple Vulnerabilities (14 November 2006)
Warning: Microsoft Windows WMF Handling Arbitrary Code Execution - Exploit In the Wild (29 December 2005)
Appsense Opens Up Dutch User Group (7 April 2006)
VMware ESX Server Multiple Vulnerabilities (5 April 2007)
AppSense Demos Breakthrough Application Control Technology At iForum (24 October 2006)
AppSense Joins Microsoft SecureIT Alliance (24 January 2006)
Microsoft Internet Security and Acceleration (ISA) Server Best Practices Analyzer Tool (27 July 2006)
Comments (0)add feed
password
 

busy