The Vulnerability Assessment and Penetration Testing of Two Networks

Total Page:16

File Type:pdf, Size:1020Kb

The Vulnerability Assessment and Penetration Testing of Two Networks Regis University ePublications at Regis University All Regis University Theses Fall 2011 The ulneV rability Assessment and Penetration Testing of Two Networks Steven L. Simpson Regis University Follow this and additional works at: https://epublications.regis.edu/theses Part of the Computer Sciences Commons Recommended Citation Simpson, Steven L., "The ulneV rability Assessment and Penetration Testing of Two Networks" (2011). All Regis University Theses. 633. https://epublications.regis.edu/theses/633 This Thesis - Open Access is brought to you for free and open access by ePublications at Regis University. It has been accepted for inclusion in All Regis University Theses by an authorized administrator of ePublications at Regis University. For more information, please contact [email protected]. Regis University College for Professional Studies Graduate Programs Final Project/Thesis Disclaimer Use of the materials available in the Regis University Thesis Collection (“Collection”) is limited and restricted to those users who agree to comply with the following terms of use. Regis University reserves the right to deny access to the Collection to any person who violates these terms of use or who seeks to or does alter, avoid or supersede the functional conditions, restrictions and limitations of the Collection. The site may be used only for lawful purposes. The user is solely responsible for knowing and adhering to any and all applicable laws, rules, and regulations relating or pertaining to use of the Collection. All content in this Collection is owned by and subject to the exclusive control of Regis University and the authors of the materials. It is available only for research purposes and may not be used in violation of copyright laws or for unlawful purposes. The materials may not be downloaded in whole or in part without permission of the copyright holder or as otherwise authorized in the “fair use” standards of the U.S. copyright laws and regulations. THE VULNERABILITY ASSESSMENT AND PENETRATION TESTING OF TWO NETWORKS A PROJECT SUBMITTED ON THE 16th OF DECEMBER, 2011 TO THE DEPARTMENT OF INFORMATION SYSTEMS OF THE SCHOOL OF COMPUTER & INFORMATION SCIENCES OF REGIS UNIVERSITY IN PARTIAL FULFILLMENT OF THE REQUIREMENTS OF MASTER OF SCIENCE IN SYSTEMS ENGINEERING BY Steven L. Simpson APPROVALS Dan Likarish, Project Advisor Robert T. Mason, Ph.D. Nancy Birkenheuer ii Abstract Vulnerability assessments and penetration testing are two approaches available for use by internet security practitioners to determine the security posture of information networks. By assessing network vulnerabilities and attempting to exploit found vulnerabilities through penetration testing security professionals are able to evaluate the effectiveness of their network defenses by identifying defense weaknesses, affirming the defense mechanisms in place, or some combination of the two. This project is a discussion of the methods and tools used during the vulnerability assessment and penetration testing, and the respective test results of two varied and unique networks. The assessment and testing of the first network occurred from an internal perspective, while the assessment and testing of the second occurred from an external perspective. While the tools and methodologies used across both networks were consistent, the test results differed significantly. The paper concludes with a series of recommendations regarding practical methods and tools that may prove useful to anyone interested in network security, and vulnerability assessments and penetration testing in particular. iii Acknowledgements I would like to thank the following people for their support and help during the pursuit of my graduate education and during the completion of this project. Specifically I would like to thank my wife, Renee Simpson for her continued belief in my abilities for all the projects I have undertaken. I would also like to thank Angus Anderson, Stuart Gentry, Brian Haynie, Ed Richards, Corbit Magby, and Justin McCallister for taking to the time to review my writings and for the edits and suggestions, which made this paper more readable and easier to understand. I would also like to thank the following people for their continued support during the pursuit of my studies and for always taking the time to ask me how my studies were progressing: Denise Haynie, Jane Richards, Stan and Jeannie Cook, Mark Williams, Davie Costales, Brian and JoAnn Morford, Anita Magby, and Doyle and Judy Warnock. Finally, I would like to thank my son, Matthew Scott Simpson for inspiring me to complete all the work required to finish my Master’s education. Running Head: SECURITY ASSESSMENTS OF TWO NETWORKS 4 Table of Contents ABSTRACT ................................................................................................................................................................II ACKNOWLEDGEMENTS ..................................................................................................................................... III TABLE OF CONTENTS ............................................................................................................................................ 4 LIST OF TABLES ...................................................................................................................................................... 6 CHAPTER 1 – INTRODUCTION ............................................................................................................................. 7 CHAPTER 2 - CANVAS ASSESSMENT AND TESTING ................................................................................... 11 CANVAS PROJECT PURPOSE, REQUIREMENTS, AND DELIVERABLES ..................................................................... 11 CANVAS PROJECT TOOLS AND RESOURCES .......................................................................................................... 12 BackTrack 4. ...................................................................................................................................................... 12 Nmap. ................................................................................................................................................................. 12 Metasploit. ......................................................................................................................................................... 14 CANVAS NETWORK TEST METHODOLOGY............................................................................................................ 15 CANVAS network host discovery. ...................................................................................................................... 15 CANVAS network port analysis.......................................................................................................................... 17 CANVAS network automated penetration testing............................................................................................... 18 CANVAS PROJECT SUMMARY ............................................................................................................................... 24 CHAPTER 3 - ITS NETWORK VULNERABILITY ASSESSMENT AND PENETRATION TESTING ....... 26 ITS PROJECT REQUIREMENTS, PROJECT RESTRICTIONS, AND PROJECT DELIVERABLES .......................................... 26 Project Requirements. ........................................................................................................................................ 26 Project Restrictions. ........................................................................................................................................... 27 Project Deliverables. ......................................................................................................................................... 27 PROJECT TEST PLAN ................................................................................................................................................ 28 Test Notification Process. .................................................................................................................................. 30 Project Tools and Resources .............................................................................................................................. 32 ITS network assessment and penetration test methodology ............................................................................... 33 Running Head: SECURITY ASSESSMENTS OF TWO NETWORKS 5 ITS NETWORK ASSESSMENT AND PENETRATION TEST RESULTS SUMMARY ........................................................... 44 CHAPTER 4 - SUMMARY AND RECOMMENDATIONS ................................................................................. 49 SUMMARY ............................................................................................................................................................... 49 RECOMMENDATIONS ............................................................................................................................................... 51 Recommendation 1. ............................................................................................................................................ 51 Recommendation 2. ............................................................................................................................................ 52 Recommendation 3. ...........................................................................................................................................
Recommended publications
  • July Edition
    July Edition From the Technical Coordinator From the Section Emergency Coordinator From the Affiliated Club Coordinator From the Public Information Coordinator From the Section Traffic Manager Out and About From the Educational Outreach ARES Training Update From the Official Observer Coordinator Handbook Give Away DMR Fun Things To Do, Classes & Hamfests Too Weather Underground Stations Club Corner Final.. Final.. From the Technical Coordinator Jeff Kopcak – K8JTK TC [email protected] Hey Gang, Around the time of Dayton, the FBI asked everyone to reboot their routers. Why would they do that? Over the last two years more than 500,000 consumer and small business routers in 54 countries have become infected with a piece of malware called “VPNFilter.” This sophisticated malware is thought to be the work of a government and somewhat targeted with many of the infected routers located in Ukraine. Security researchers are still trying to determine what exactly VPNFilter was built to do. So far, it is known to eavesdrop on Internet traffic grabbing logon credentials and looking for specific types of traffic such as SCADA, a networking protocol controlling power plants, chemical plants, and industrial systems. Actively, it can “brick” the infected device. Src: Cisco’s Talos Intelligence Group Blog Bricking is a term to mean ‘render the device completely unusable’ and being as useful as a brick. In addition to these threats, this malware can survive a reboot. Wait, didn’t the FBI ask all of us to reboot our routers? Won’t that clear the infection? No. In order for this malware to figure out what it needs to do, it reaches out to a command-and-control server.
    [Show full text]
  • Personal Firewalls Are a Necessity for Solo Users
    Personal firewalls are a necessity for solo users COMPANY PRODUCT PLATFORM NOTES PRICE Aladdin Knowledge Systems Ltd. SeSafe Desktop Windows Combines antivirus with content filtering, blocking and $72 Arlington Heights, Ill. monitoring 847-808-0300 www.ealaddin.com Agnitum Inc. Outpost Firewall Pro Windows Blocks ads, sites, programs; limits access by specific times $40 Nicosia, Cyprus www.agnitum.com Computer Associates International Inc. eTrust EZ Firewall Windows Basic firewall available only by download $40/year Islandia, N.Y. 631-342-6000 my-etrust.com Deerfield Canada VisNetic Firewall Windows Stateful, packet-level firewall for workstations, mobile $101 (Canadian) St. Thomas, Ontario for Workstations users or telecommuters 519-633-3403 www.deerfieldcanada.ca Glucose Development Corp. Impasse Mac OS X Full-featured firewall with real-time logging display $10 Sunnyvale, Calif. www.glu.com Intego Corp. NetBarrier Personal Firewall Windows Full-featured firewall with cookie and ad blocking $50 Miami 512-637-0700 NetBarrier 10.1 Mac OS X Full-featured firewall $60 www.intego.com NetBarrier 2.1 Mac OS 8 and 9 Full-featured firewall $60 Internet Security Systems Inc. BlackIce Windows Consumer-oriented PC firewall $30 Atlanta 404-236-2600 RealSecure Desktop Windows Enterprise-grade firewall system for remote, mobile and wireless users Varies blackice.iss.net/ Kerio Technologies Inc. Kerio Personal Firewall Windows Bidirectional, stateful firewall with encrypted remote-management option $39 Santa Clara, Calif. 408-496-4500 www.kerio.com Lava Software Pty. Ltd. AdWare Plus Windows Antispyware blocks some advertiser monitoring but isn't $27 Falköping, Sweden intended to block surveillance utilities 46-0-515-530-14 www.lavasoft.de Network Associates Inc.
    [Show full text]
  • Hostscan 4.8.01064 Antimalware and Firewall Support Charts
    HostScan 4.8.01064 Antimalware and Firewall Support Charts 10/1/19 © 2019 Cisco and/or its affiliates. All rights reserved. This document is Cisco public. Page 1 of 76 Contents HostScan Version 4.8.01064 Antimalware and Firewall Support Charts ............................................................................... 3 Antimalware and Firewall Attributes Supported by HostScan .................................................................................................. 3 OPSWAT Version Information ................................................................................................................................................. 5 Cisco AnyConnect HostScan Antimalware Compliance Module v4.3.890.0 for Windows .................................................. 5 Cisco AnyConnect HostScan Firewall Compliance Module v4.3.890.0 for Windows ........................................................ 44 Cisco AnyConnect HostScan Antimalware Compliance Module v4.3.824.0 for macos .................................................... 65 Cisco AnyConnect HostScan Firewall Compliance Module v4.3.824.0 for macOS ........................................................... 71 Cisco AnyConnect HostScan Antimalware Compliance Module v4.3.730.0 for Linux ...................................................... 73 Cisco AnyConnect HostScan Firewall Compliance Module v4.3.730.0 for Linux .............................................................. 76 ©201 9 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public.
    [Show full text]
  • Listener Q&A #8
    Transcript of Episode #44 Listener Feedback Q&A #8 Description: Steve and Leo discuss questions asked by listeners of their previous episodes. They tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world “application notes" for any of the security technologies and issues they have previously discussed. High quality (64 kbps) mp3 audio file URL: http://media.GRC.com/sn/SN-044.mp3 Quarter size (16 kbps) mp3 audio file URL: http://media.GRC.com/sn/sn-044-lq.mp3 Leo Laporte: Bandwidth for Security Now! is provided by AOL Radio at AOL.com/podcasting. This is Security Now! with Steve Gibson, Episode 44 for June 15, 2006: Your questions, Steve’s answers. Security Now! is brought to you by Astaro, makers of the Astaro Security Gateway, on the web at www.astaro.com. I smell a mod 4 episode. I do indeed. Leo Laporte here, Steve Gibson in Irvine, and it’s Episode 44. And as far as I can tell, that’s divisible by 4. Steve Gibson: That’s like a double mod 4. Leo: That’s a double mod 4. Steve: Yeah. Leo: So we get our usual 20 questions. Steve: It’s even mod 11. Leo: Mod 11, mod 4, mod 2, mod 0... Steve: Mod 22. Yeah. Leo: All right. You math showoff. Let’s get to the questions, unless there’s anything we want to cover from our last episode, where we talked all about ports.
    [Show full text]
  • Windows Antivirus Support Chart for Hostscan 3.1.06073 Product Name
    Windows Antivirus Support Chart for HostScan 3.1.06073 Marketing Product Data File Engine Live Version Check RTP Set RTP Language Alias Name Time Version Update Names 360Safe.co m 360 1.x ✔ ✔ ✔ ✔ ✔ English 360杀毒 Antivirus 360 3.x ✔ ✘ ✔ ✘ ✘ English Antivirus 360 Total 4.x ✔ ✔ ✔ ✘ ✘ English Security Chinese 360 360杀毒 1.x ✔ ✔ ✔ ✘ ✘ Simplified Antivirus Chinese 360 360杀毒 2.x ✔ ✔ ✔ ✘ ✘ Simplified Antivirus Chinese 360杀毒 3.x ✘ ✘ ✔ ✘ ✘ Simplified Chinese 360 360杀毒 4.x ✘ ✘ ✔ ✘ ✘ Simplified Antivirus Chinese 360 360杀毒 5.x ✘ ✘ ✔ ✘ ✘ Simplified Antivirus Other 360Safe.co x ✘ ✘ ✘ ✘ ✘ English m Antivirus AEC, spol. s r.o. TrustPort 2.x ✘ ✘ ✔ ✔ ✘ English Antivirus Other AEC, spol. s r.o. x ✘ ✘ ✘ ✘ ✘ English Antivirus Agnitum Ltd. Outpost Antivirus 7.x ✔ ✔ ✔ ✔ ✘ English Pro Outpost Antivirus 8.x ✔ ✔ ✔ ✔ ✘ English Pro Outpost Antivirus 9.x ✔ ✔ ✔ ✔ ✔ English Pro Outpost Outpost Security Antivirus 6.x ✔ ✔ ✔ ✔ ✘ English Suite Pro Pro 2009 2009 Outpost Security 7.x ✘ ✘ ✔ ✘ ✘ English Suite Free Outpost Security 7.x ✔ ✔ ✔ ✔ ✘ English Suite Pro Outpost Security 8.x ✔ ✔ ✔ ✔ ✔ English Suite Pro Outpost Security 9.x ✔ ✔ ✔ ✔ ✔ English Suite Pro Other Agnitum x ✘ ✘ ✘ ✘ ✘ English Ltd. Antivirus AhnLab, Inc. AhnLab Security 2.x ✔ ✔ ✘ ✔ ✘ English Pack AhnLab V3 Internet 7.x ✔ ✔ ✔ ✔ ✘ English Security 2007 AhnLab V3 Internet Security 7.x ✔ ✔ ✔ ✔ ✘ English 2007 Platinum AhnLab V3 Internet Security 7.x ✔ ✔ ✔ ✔ ✘ English 2008 Platinum AhnLab V3 Internet Security 7.x ✔ ✔ ✔ ✔ ✔ English 2009 Platinum AhnLab V3 Internet Security 7.0 7.x ✔ ✔ ✔ ✔ ✘ English Platinum Enterprise AhnLab V3 Internet 8.x ✔ ✔ ✔ ✔ ✔ English Security 8.0 AhnLab V3 Internet 9.x ✔ ✔ ✔ ✔ ✔ English Security 9.0 AhnLab V3 VirusBlock Internet 7.x ✔ ✔ ✘ ✔ ✘ English Security 2007 AhnLab V3 VirusBlock Internet Security 7.x ✔ ✔ ✔ ✘ ✔ English 2007 Platinum Enterprise V3 Click 1.x ✔ ✘ ✘ ✘ ✘ English V3 Lite 1.x ✔ ✔ ✔ ✔ ✔ Korean V3 Lite 3.x ✔ ✔ ✔ ✘ ✘ Korean V3 VirusBlock 6.x ✔ ✔ ✘ ✘ ✘ English 2005 V3 ウイルスブ NA ✔ ✔ ✘ ✔ ✘ Japanese ロック V3Pro 2004 6.x ✔ ✔ ✔ ✔ ✘ English Other AhnLab, x ✘ ✘ ✘ ✘ ✘ English Inc.
    [Show full text]
  • A Survey on Network Firewall Solutions
    A Survey on Network Firewall Solutions Nahid Kausar Shaikh Poonam Dhawale Asst. Prof., Department of Information Technology Asst. Prof., Department of Information Technology A.P. Shah Institute of Technology, A.P. Shah Institute of Technology, Thane, Maharashtra, India Thane, Maharashtra, India [email protected] [email protected] Shruti Agrawal Asst. Prof., Department of Computer Engineering A.P. Shah Institute of Technology, Thane, Maharashtra, India [email protected] Abstract — Today, as the number of online users increasing be a hardware device or a software program running on a rapidly resulting in complex networks and increase in network computer. Independent of the type of firewall, it must have at threats. Firewalls are an essential part of any information least two networks interfaces. One of its interfaces is connected security system being the first defense line against security to the private network and other is connected to the public attacks. Firewall is one of the most important parts of the network. network system which provides security in both the direction. It monitors both incoming and outgoing traffic and the specified Classification of the network firewall can be based on action. Firewalls can be categorized on the basis of usage and different parameters. features. There are a number of paid solutions present in the market but are expensive. As a result, Free or open source 1.1.1 Classification based on Firewall Usage firewall solutions can alternative to the paid solutions. Pfsense is 1.1.2 Classification based on Firewall Features free or open source firewall based on Free-BSD. Endian Firewall Community (EFW) is also free, open source network firewall 1.1.1 Classification based on Firewall Usage which is based on Linux.
    [Show full text]
  • Listener Feedback Q&A
    Security Now! Transcript of Episode #173 Page 1 of 37 Transcript of Episode #173 Listener Feedback Q&A #55 Description: Steve and Leo discuss the week's major security events and discuss questions and comments from listeners of previous episodes. They tie up loose ends, explore a wide range of topics that are too small to fill their own episode, clarify any confusion from previous installments, and present real world 'application notes' for any of the security technologies and issues we have previously discussed. High quality (64 kbps) mp3 audio file URL: http://media.GRC.com/sn/SN-173.mp3 Quarter size (16 kbps) mp3 audio file URL: http://media.GRC.com/sn/sn-173-lq.mp3 INTRO: Netcasts you love, from people you trust. This is TWiT. Leo Laporte: Bandwidth for Security Now! is provided by AOL Radio at AOL.com/podcasting. This is Security Now! with Steve Gibson, Episode 173 for December 4, 2008: Listener Feedback #55. This show is brought to you by listeners like you and your contributions. We couldn't do it without you. Thanks so much. It's time for Security Now!, the show that looks at security, now. Right now. Right this minute. Steve Gibson is here. Hi, Steve. Steve Gibson: Hey, Leo. Leo: From GRC.com, the man who discovered spyware, coined the term, created the first antispyware program, has written so many useful security utilities like ShieldsUP!, Shoot The Messenger, Unplug n' Pray. And every week we talk about the latest security news and answer questions and also kind of explain, I think you're really good at teaching, what all this is.
    [Show full text]
  • Kansalaisen Mikrotuen Palomuurijärjestelmä
    Opinnäytetyö (AMK) Tietojenkäsittelyn koulutusohjelma Tietoliikenne 2012 Tero Mäkelä KANSALAISEN MIKROTUEN PALOMUURIJÄRJESTELMÄ OPINNÄYTETYÖ (AMK) | TIIVISTELMÄ Turun ammattikorkeakoulu Tietojenkäsittelyn koulutusohjelma | Tietoliikenne Marraskuu 2012 | 59 sivua Esko Vainikka Tero Mäkelä KANSALAISEN MIKROTUEN PALOMUURIJÄRJESTELMÄ Opinnäytetyön tavoitteena on luoda Kansalaisen mikrotuelle palomuurijärjestelmä, jolla saadaan jaettua asiakas- ja työntekijälaitteet omiin verkkoihin. Rajatussa asiakasverkossa laitteet voidaan huoltaa turvallisesti vaikuttamatta muiden laitteiden tietoturvallisuuteen haitallisesti. Lisäksi luodaan palomuurijärjestelmän käyttöohjeet. Palomuurijärjestelmän luomisprosessia tarkastellaan järjestelmäkehityksen elinkaarimallin avulla. Palomuurin ja RAID-tekniikoiden toiminta pyritään selvittämään perusominaisuuksien ja toimintaperiaatteiden osalta. Järjestelmän alkuunpanossa selvitetään palomuurin vaatimusmäärittelyt, jonka jälkeen hankitaan tarvittavat laitekomponentit ja selvitetään Kansalaisen mikrotuen verkon rakenne. Tämän jälkeen suoritetaan palomuurijärjestelmien vertailu, jonka perusteella valitaan käyttöön tuleva palomuurijärjestelmä. Lopuksi järjestelmä asennetaan ja asetetaan asetukset vaatimusmäärittelyn mukaisesti. Järjestelmä saatiin otettua käyttöön useista järjestelmän asennuksen aikana syntyneistä vastoinkäymisistä huolimatta. Järjestelmä saatiin vastaamaan vaatimusmäärittelyjä muuten, paitsi välityspalvelimen osalta. ASIASANAT: Palomuurit, RAID, Kansalaisen mikrotuki, pfSense BACHELOR´S THESIS |
    [Show full text]
  • Zonealarm Parental Control User Guide
    ZoneAlarm Parental Control User Guide ©2011 Check Point Software Technologies Ltd. All rights reserved. ZoneAlarm Parental Control User Guide Page 1 ZoneAlarm Parental Control User Guide March 2011 ZoneAlarm Parental Control User Guide Page 2 Check Point Software Trademarks Copyright © 2010 Check Point Software Technologies Ltd. DISCLAIMER OF WARRANTY Check Point Software Technologies Ltd. makes no representation or warranties, either express or implied by or with respect to anything in this document, and shall not be liable for any implied warranties of merchantability or fitness for a particular purpose or for any indirect special or consequential damages. COPYRIGHT NOTICE No part of this publication may be reproduced, stored in a retrieval system or transmitted, in any form or by any means, photocopying, recording or otherwise, without prior written consent of Check Point Software Technologies Ltd. No patent liability is assumed with respect to the use of the information contained herein. while every precaution has been taken in the preparation of this publication, Check Point Software Technologies Ltd. assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice. Copyright © Check Point Software Technologies Ltd. All rights reserved. TRADEMARKS ©2003-2011 Check Point Software Technologies Ltd. All rights reserved. Check Point, Check Point DLP Check Point Endpoint Security, Check Point Endpoint Security On Demand, the Check Point logo, Check Point Full Disk Encryption, ZoneAlarm, ZoneAlarm Antivirus, ZoneAlarm DataLock, ZoneAlarm Extreme Security, ZoneAlarm ForceField, ZoneAlarm Free Firewall, ZoneAlarm Pro, ZoneAlarm Internet Security Suite, ZoneAlarm Security Toolbar, ZoneAlarm Secure Wireless Router, Zone Labs, and the Zone Labs logo are trademarks or registered trademarks of Check Point Software Technologies Ltd.
    [Show full text]
  • PC Security Options
    PC Security Options Recommended Free Security Programs for Windows Users Microsoft’s suite of free protection programs will protect most users. These include Windows Firewall, and Microsoft Security Essentials. (The latter replaces the basic Windows Defender). However if you want more robust protection you might consider some of the better free options like Avast, AVG or paid solutions like ESET NOD. If you just use the above you should also have in your arsenal Spybot, SuperantiSpyware and MalwareBytes, Spybot is useful in picking up common spyware and cookies problems. The last two are more successful in getting rid of some nasty Trojans like Vundo and Virtumonde and their derivatives. However you generally will not need to run these programs regularly. For day to day use Security Essentials will handle most things. See the Lifehacker article ( http://lifehacker.com/5401453/stop-paying-for-windows-security-microsofts-security-tools-are-good-enough ) on Security Essentials and Windows Firewall Alternatives The best free Antivirus programs are AVG2012 free and Avast Free Antivirus (Phil likes AVG as do many users. I prefer Avast as it runs easily and updates auto and it hardly slows you down. It’s also a firewall). Also, Avira and Comodo are excellent free programs. In a recent voting poll in Lifehacker, readers voted AVG best, with Security Essentials, second, NOD third, followed by Avast and Avira. Malware/Spyware : Spybot, SuperantiSpyware and MalwareBytes. The last two are excellent for nasty things like Vundo/Virtumonde trojans. Only use when required. Free firewalls Zone Alarm free is good and also Comodo’s firewall.
    [Show full text]
  • Q2 Consumer Endpoint Protection Apr-Jun 2020
    HOME ANTI- MALWARE PROTECTION APR - JUN 2020 www.SELabs.uk [email protected] @SELabsUK www.facebook.com/selabsuk blog.selabs.uk SE Labs tested a variety of anti-malware (aka ‘anti-virus’; aka ‘endpoint security’) products from a range of well-known vendors in an effort to judge which were the most effective. Each product was exposed to the same threats, which were a mixture of targeted attacks using well-established techniques and public email and web-based threats that were found to be live on the internet at the time of the test. The results indicate how effectively the products were at detecting and/or protecting against those threats in real time. 2 Home Anti-Malware Protection April - June 2020 MANAGEMENT Chief Executive Officer Simon Edwards CONTENTS Chief Operations Officer Marc Briggs Chief Human Resources Officer Magdalena Jurenko Stefan Dumitrascu Chief Technical Officer Introduction 04 TESTING TEAM Nikki Albesa Executive Summary 05 Zaynab Bawa Thomas Bean 1. Total Accuracy Ratings 06 Solandra Brewster Dimitar Dobrev Home Anti-Malware Protection Awards 07 Liam Fisher Gia Gorbold 2. Threat Responses 08 Joseph Pike Dave Togneri 3. Protection Ratings 10 Jake Warren Stephen Withey 4. Protection Scores 12 IT SUPPOrt Danny King-Smith 5. Protection Details 13 Chris Short 6. Legitimate Software Ratings 14 PUBLICatION Steve Haines 6.1 Interaction Ratings 15 Colin Mackleworth 6.2 Prevalence Ratings 16 Website selabs.uk Twitter @SELabsUK 6.3 Accuracy Ratings 16 Email [email protected] Facebook www.facebook.com/selabsuk 6.4 Distribution of Impact Categories 17 Blog blog.selabs.uk Phone 0203 875 5000 7.
    [Show full text]
  • How to Configure Anti-Virus to Permit Softminer Binaries
    How to Configure Anti-Virus to Permit SoftMiner Binaries If you trust a file, file type, folder, or a process that anti-virus has detected as mali- cious, you can stop anti-virus from alerting you or blocking the program by adding the file to the exclusions list. Here’s a step-by-step guide on how to do that for a variety of anti-virus programs. RAZER SOFTMINER 1 Windows Defender 1. Open Windows Defender Security Center. STEP 3 2. Select Virus & threat protection > Virus & threat protection settings 3. Turn off the toggle under the Real-time protection section 4. Download SoftMiner installer from server STEP 6 to local disk C:\Users\user\Downloads 5. Install SoftMiner application to following folder: C:\Program Files (x86)\SoftMiner 6. Select Virus & threat protection > Virus & threat protection settings > Add or remove STEP 7 exclusions. 7. Click Add an exclusion > Folder 8. Open This PC > Downloads > Select folder with SoftMiner Setup file > Click Select Folder 9. Click Add an exclusion > Folder 10. Open folder: C:\Program Files (x86)\SoftMiner STEP 8 > Select folder “Miners” > click Select Folder 11. Enable Real-time protection: Select Virus & threat protection > Virus & threat protection settings > Turn on the toggle un- der the Real-time protection section STEP 10 SoftMiner RAZER SOFTMINER 2 BitDefender Anti-Virus Plus 1. Open the Bitdefender program and go to the STEP 2 STEP 3 Protection window 2. Click the Settings button in the ANTIVIRUS module 3. In the Shield tab, turn off the switch next to Bitdefender Shield by clicking on it. NOTE: You’ll be asked for how long you wish to disable the protection.
    [Show full text]