Towards Improving Productivity in NMapSecurity Audits

Abstract

Maintaining an adequate security level in computer infrastructures, like Internet-facing web servers, requires periodic assessment of their vulnerabilities with specialized security tools. nmap is arguably the most popular one, due to its versatility, powerful features, and low resource usage. However, this versatility can turn its usage difficult and error-prone, as it implements a lot of features and reports errors at runtime. This can lead to suboptimal results while designing auditing tasks. This research aims to decrease this complexity by developing a web GUI that favors experimentation, on-demand scans, and provides solutions to several shortcomings detected in the official one. We complemented it with a Domain Specific Language that implements early detection and reporting of syntax, type, and semantic errors when creating audit tasks. Both expand nmap possibilities, creating robust, schedulable, distributable, and portable auditing tasks able to find anomalies analyzing their output. Our initial release shows that the web GUI has been well received by several security related media and professionals. The language can detect and report a wide range of potential errors, substantially increasing the robustness of the created tasks. Therefore,

Improving Concept Learning Through Specialized Digital Fanzines

“…Future work will integrate this approach to reinforce problematic concepts in other courses related to computer security and administration [37]. These will complement other independent initiatives we plan to use, aimed to enhance learning from different points of view [38], or with learningfocused tools [39]. Fanzines will also be used to improve the understanding of the most problematic theory and laboratory concepts of these courses identified by the student feedback, so the application of the rest of the initiatives could be more successful.…”