
156 Managing Network Vulnerability Assessment
Attack signature “sniffing”:
– Symantec NetProwler
– ISS RealSecure — network
– Symantec Intruder Alert (ITA) — host/server
The only type of testing not listed above is quality assurance testing. This
is a very important step in the process. As we discussed previously, by using
a multi-test environment (MTE), we will help to minimize both false positives
and false negative reports. While all the software we looked at in the tools
section is great software, there are just too many network conditions that can
interfere with accurate testing. So always double-check the tests that you run
and keep records of that ...