[Original] Microsoft baseline security analyzer tool Introduction

[Original] Microsoft baseline security analyzer tool Introduction

 

As we all know, when conducting security testing, you can start with deployment and infrastructure, input verification, identity verification, authorization, configuration management, sensitive data, session management, encryption, parameter operations, exception management, review, and logging.. Today I would like to recommend a free security leak scanning tool Microsoft Baseline Security Analyzer Microsoft mbsa on Windows.

1. What is mbsa?
It is a free security and vulnerability assessment scanning tool for administrators, security auditors, and IT professionals. This tool allows you to scan one or more windows-based computers to detect Common Security Configuration errors. Mbsa scans Windows-based computers and checks the operating system and other installed components (such as IIS and SQL Server) to detect security configuration errors, and patch it through recommended security updates in a timely manner
.

2. Why should we learn mbsa?

For security testing, we can start with deployment and infrastructure to discover known potential problems, which can effectively improve the risk of system vulnerabilities. Suppose you deploy the operating system, database, server software configuration is not secure,ProgramCodeWhat is the use of excellence.

3 mbsa Official WebsiteHttp://www.microsoft.com/
4 mbsa:Http://www.microsoft.com/en-us/download/details.aspx? Id = 7558
5 mbsa features:
5.1 Check System Configuration
A Windows Operating System
B Internet Information Server
C Microsoft SQL Server
5.2 Security Update

6 scan modes and types
1 single computer
2 computers

6.1 scan type introduction:
1 mbsa typical Scan
A typical scan of mbsa performs a scan and saves the results in a separate XML file. This allows you to view the results in the mbsa GUI. These scans include a full set of available Windows, IIS, SQL, and security update checks.
You can easily sort the reports by computer name, scan date, IP address, or security evaluation. This feature allows you to easily compare Security scans over a period of time.

2 HFNetChk typical Scanning
A typical HFNetChk scan only checks for missing security updates and displays the scan results in the command line window in text format.

3. Network Scanning
Mbsa can remotely scan up to computers from a central computer at the same time. Mbsa is designed to have local management permissions on each computer that is scanned.

7 Introduction to other plug-ins
Microsoft Office Visio 2007 connector for Microsoft Baseline Security Analyzer (mbsa) 2.1 allows you to clearly view the scan results of mbsa.
official: http://download.microsoft.com/download/8/2/8/8285687b-437b-492b-899c-87ec1ed5e79c/Microsoft%20Visio%202007%20Connector%20for%20MBSA.msi