推出 Nessus Expert，现在专门针对现代攻击面而量身打造
长久以来，Nessus 一直是漏洞评估领域无可争议的领导者。随着 Nessus Expert 的推出，您现在可以防范整个云基础设施中新兴的网络威胁，并了解外部攻击面中所涉及的资产。
因为 Nessus 发布于 20 年前，所以已经成为漏洞评估领域的行业标准。当 Tenable 的联合创始人，也即前 CTO Renaud Deraison 从大学辍学去追逐打造一款软件漏洞发现工具的理念时，任何人都想不到 Nessus 会对网络安全行业产生如此大的影响。
自 Nessus 于 1998 年首次发布以来，该行业变化巨大，这增加了安全专业人员工作的复杂性和挑战性：
- 攻击面已大幅扩展到传统的 IT 资产之外，如服务器、工作站和网络基础设施，现在云部署、工作负载以及连接到 Internet 的资产都涵盖在内。
- 依赖云和基础设施即代码 (IaC) 来简化开发生命周期已经成为每个企业业务的关键组成部分。尽管如此，在产品投产之前，开发人员仍没有遵守安全最佳实践，这会增加风险。
- 随着技术的进步，如果不涉及 IT 或安全，个人会很轻松地快速构建云实例，这样安全专业人员对环境中可能存在的各种面向 Internet 的资产了解有限。
为了帮助信息安全专业人员应对上述挑战，Tenable 开发了许多创新型评估功能，可以通过 Nessus Expert 使用。
Nessus 系列产品推出最新成员 Nessus Expert
Nessus Expert 是在 Nessus Professional 的基础上打造的一款新产品。Nessus Expert 可针对您的现代攻击面提供漏洞评估 - 添加基础设施即代码 (IaC) 扫描和外部攻击面发现功能，以识别构成企业面向外部攻击面的所有域和子域。
对于 IaC，Nessus Expert 支持用户在软件开发生命周期的设计和构建阶段以编程方式检测云基础设施的错误配置和漏洞。
Nessus Expert 利用 500 个预构建的策略，在产品投产之前检查配置文件和代码存储库是否有安全和配置问题，这有助于消除开发人员在不知情的情况下，将漏洞和错误配置推送到生产中时可能出现的代价高昂且耗时的错误。Nessus Expert 支持用户：
- 在自动化管道中识别策略违规
- 利用 500 个预构建的策略执行 IaC 扫描
- 防止错误配置和漏洞到达云实例
- 防止停机以及消耗与部署后补救代码相关的额外成本和资源。
Nessus Expert 还包含外部攻击面管理功能，可以从攻击者的角度持续发现和清点企业面向 Internet 的资产。Nessus Expert 对域执行无缝扫描，可以发现安全团队以前很少或没有留意到的子域。此功能支持用户：
- 每 90 天最多扫描五个域，可了解所有关联的子域
- 获取有关面向 Internet 的资产的重要上下文信息，如端口安全套接字层 (SSL) 详细信息和域名系统 (DNS) 信息
- 根据需要另外购买域
- 针对新识别的资产轻松启动扫描
Nessus Expert 功能一览
|
功能 |
Nessus Professional |
Nessus Expert |
|
适用功能… |
渗透测试人员、顾问和中小型企业 |
渗透测试人员、顾问、开发人员和中小型企业 |
|
实时漏洞更新 |
✓ |
✓ |
|
漏洞扫描 |
✓ |
✓ |
|
外部攻击面扫描 |
X |
✓ 每季度五个域 |
|
添加域的功能 |
X |
✓ |
|
扫描云基础设施 |
X |
✓ |
|
云基础设施的合规性审计 |
X |
500 个预构建策略 |
了解详情
想亲自了解 Nessus Expert 如何帮助您吗？立即试用 Nessus Expert。
相关文章
Cybersecurity Snapshot: How To Boost Customers' Trust in Your Digital Services
May 12, 2023Check out how beefing up digital trust in your technology yields key business benefits. Plus, a sophisticated cyber espionage operation has been defused. Also, why cyberattack victims should speak up. In addition, don’t miss our poll on mobile device security. And much more!
The Role of Open Source in Cloud Security: A Case Study with Terrascan by Tenable
May 11, 2023Open source software and cloud-native infrastructure are inextricably linked and can play a key role in helping to manage security. Open source security tools like Terrascan by Tenable are easy to scale, cost-effective and benefit from an agile community of contributors. Let’s take a look at how you can implement it today.
Cybersecurity Snapshot: CSA Offers Guidance on How To Use ChatGPT Securely in Your Org
May 5, 2023Check out the Cloud Security Alliance’s white paper on ChatGPT for cyber pros. Plus, the White House’s latest efforts to promote responsible AI. Also, have you thought about vulnerability management for AI systems? In addition, the “godfather of AI” sounds the alarm on AI dangers. And much more!
Tenable Cyber Watch: White House Unveils $140M Investment for Responsible AI, Top 5 Malware in Q1 2023, and more
May 15, 2023This week’s edition of the Tenable Cyber Watch unpacks the White House’s $140 million dollar investment into AI research and development and explores the security implications of ChatGPT. Also covered: The top 5 malware strains for Q1 2023.
Cybersecurity Snapshot: How To Boost Customers' Trust in Your Digital Services
May 12, 2023Check out how beefing up digital trust in your technology yields key business benefits. Plus, a sophisticated cyber espionage operation has been defused. Also, why cyberattack victims should speak up. In addition, don’t miss our poll on mobile device security. And much more!
The Role of Open Source in Cloud Security: A Case Study with Terrascan by Tenable
May 11, 2023Open source software and cloud-native infrastructure are inextricably linked and can play a key role in helping to manage security. Open source security tools like Terrascan by Tenable are easy to scale, cost-effective and benefit from an agile community of contributors. Let’s take a look at how you can implement it today.
- 云
- 容器安全
- DevOps
