Re: System Security Scanner

[shaunl () MARCH CO UK (Shaun Lowry)]

-----BEGIN PGP SIGNED MESSAGE-----

Christopher Klaus <cklaus () iss net> writes:

> Just a side note, we are using tixwish to help build a GUI for alpha/beta
> of a new security product for Unix boxes.  XPI prolly has seen a sudden
> flurry of activity of people grabbing tixwish to run the security product.
>
> I just wanted to let everyone know here so you could see how we are using
> some tixwish widgets.
>
>
> System Security Scanner (3S) - Alpha Release
>
> ----------------------------------------------------------------------------
> DESCRIPTION
>
> System Security Scanner is a system host assessment tool that will go
> through a machine searching for the following vulnerabilities:
>
>   * File Permissions
>   * Account Password guessing
>   * Rhosts configuration
>   * Shosts configuration
>   * Netrc configuration
>   * Inetd configuration - checks for insecure daemons
>   * Host.Equiv configuration
>   * MD5 Library
>          We have built a library of signature checksums for patched and
>          unpatched files which allows to see if the system has vendor
>          installed security patches.

[snip]

As an alternative, March Systems in the UK has a similar tool based on
Tcl/Tk/Tix etc which has been in the field for over two years.  More info
is available at http://www.march.co.uk/sm-top.html.  Mail info () march co uk
regarding trials and evaluations.

Security Manager is also available in the US from Pro/Sim in Houston, Texas.

        Shaun.

- --
Shaun Lowry           | March Systems Ltd.,           http://www.march.co.uk/
PGP Key available     | 14 Brewery Court, High St.,
from key servers or   | Theale, UK. RG7 5AJ
via e-mail on request | +44 1734 304224

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2i

iQCVAwUBMdeWk/t1GZPaCwbNAQGFLgQA1yVkCo2pU+WLpyiNX26VD9yQkFdVdRN6
Y/QFbRoChjmn5SDWtC+9x3NG5A2lSrsgPtHVEy7kJOGM1MThfJeqZ0dOCRPGnvB2
e9Q/dWDqKvBYqysSauDrF7L1r7Q2iHLVGhgDrNFrfno3D+UlbgK1+jdfsHv0MqR/
XQsOhjGPBFU=
=2suP
-----END PGP SIGNATURE-----