The network-based vulnerability assessments are completed by scanner tools which are internally or externally installed. These allow a network administrator to discover and eliminate their organization's network-based security vulnerabilities.
A network vulnerability assessment generally includes tasks such as the following:
- Password analysis for network devices such as Router/Switches/Wi-Fi
- Reviewing network strength against distributed denial of service (DDoS)
- Network intrusion
- Device-level security analysis (router, switch, computer)
- Scanning for known and potential threats and vulnerabilities
Some common tools are:
- Nessus
- OpenVAS
- Qualys