Jump to content

OpenVAS

From Wikipedia, the free encyclopedia

This is an old revision of this page, as edited by 89.153.132.2 (talk) at 10:48, 16 August 2011. The present address (URL) is a permanent link to this revision, which may differ significantly from the current revision.

OpenVAS
Developer(s)Greenbone Networks GMBH
Stable release
4.0.0 / March 17, 2011
Repository
Operating systemCross-platform
TypeVulnerability scanner
LicenseGPL
Websitewww.openvas.org

OpenVAS (Open Vulnerability Assessment System[1], initially GNessUs) is a framework of several services and tools offering a vulnerability scanning and vulnerability management solution.

The actual security scanner is accompanied with a daily updated feed of Network Vulnerability Tests (NVTs), over 20,000 in total (as of January 2011).

All OpenVAS products are Free Software. Most components are licensed under the GPL.

The latest version is 4.0.0, released March 2011.[2]

The OpenVAS 4 Structure

History

OpenVAS was initially named GNessUs as a fork of the Nessus security scanner to allow future free development of the now-proprietary tool.

OpenVAS was originally proposed by pentesters at Portcullis Computer Security[3] and then announced[4] by Tim Brown on Slashdot. OpenVAS is a member project of Software in the Public Interest.[5] Previously, it had been voted out because the project appeared to be dead.[6] The OpenVAS domains were donated by SecuritySpace, hosting was donated by Nth Dimension/Public Internet and DevCon 1 conference fees were paid for by Intevation[7] and DN Systems.[8]

Limitations

OpenVAS's ssh authentication is still limited to using the blowfish algorithm.

References