DENOFAS: A Vulnerability Assessment Tool

This paper describes the development of a software tool for detection of vulnerabilities in networked systems, using public available security resources. Our tool builds is knowledge from: searching host’s ports and available services, looking for security faults, using periodically updated security information and previously scanned data to build a knowledge base. The inference process produces network security reports, which are sent to the network administrator. In the development we used an agent-based approach. By delegating the detection and monitoring tasks to the agent, our approach present several advantages: the personalized reports produced by the agent, which emphasize main possible threats and vulnerabilities taking into account previously collected data, the monitoring scan procedures and the permanently updated knowledge about new vulnerabilities, representing all an added value to our network overall security.