MIT develops network analysis tool

MIT's Lincoln Laboratory has developed a network mapping tool that enables managers to track likely hacking routes.

The NetSPA for Network Security Planning Architecture tool scans the network architecture, the individual computers it connects and a list of likely vulnerabilities to generate a threat mitigation programme.

"It's a matter of what the attacker can get to and in what order," said Kyle Ingols, a computer scientist working on NetSPA.

"If you spend time patching vulnerabilities the attacker can't get to first, you've left your network exposed longer."

The software also suggests the quickest way effectively to block holes, and ways to configure the network to mitigate the damage from an undetected attack.

"Instead of patching or fixing or blocking 1,000 hosts, we could say there are 10 critical hosts and patch those first," said Ingols.

The tool uses commonly available vulnerability scanners but speeds up the scanning process and adds scans of firewalls and router settings to predict likely hacking routes.

See also:

Video analytics to revolutionise surveillance

Intelligent scanning of footage to help security and planning  11 Aug 2008

Company PCs lacking basic security

Sophos uncovers sloppy attitude at 80 per cent of organisations  19 Jun 2008

Experts warn of security-dodging Trojans

New malware on the rampage  06 Jun 2008

Boffins tackle random scanning worms

Technique could contain threats such as Code Red and SQL Slammer  05 Jun 2008

Like this story? Spread the news by clicking below:

 del.icio.us     Digg this     reddit!