What Happens in Vegas: Near Real-Time Vulnerability Visibility

No ratings

Presented at BSidesNashville 2018 by

Michael Vincent

Real-time visibility to vulnerabilities can be extremely challenging, especially when you have a large network of mixed systems. Without it, balancing remediation against non-stop gaming uptime is a difficult bet to place. The key to monitoring a continually changing set of hosts in the environment is having a strategy to complete deep scans within tight timelines. In this talk, a flexible and automated approach is presented from work in Las Vegas. A scanner scheduling method was developed to perform efficient vulnerability scans, detect new hosts, determine when to add more scanning nodes, and report change as it happens. Whether using a commercial or an open source platform, learn how one "revolving scan" strategy enables an immediate view.