Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Analytics //

Security Monitoring

1/9/2020
09:52 AM
100%
0%

7 Free Tools for Better Visibility Into Your Network

It's hard to protect what you don't know is there. These free tools can help you understand just what it is that you need to protect -- and need to protect yourself from.
Previous
1 of 8
Next

What's on your network? It's a simple question, but one that countless security and network management teams struggle to answer because most enterprise networks are dynamic, living things that change at a rapid pace. That change is the key to adapting to a changing business environment — and key to criminals' ability to breach the perimeter and gain access to enterprise assets.

Security teams tend to have a very good idea of what the network looked like on the day it went live. Nevertheless, conversations with consultants (and over drinks at conferences) overflow with complaints and confessions about how those same teams are ignorant of what the network looks like right now. That's a problem. And it becomes a bigger problem when it runs into the reality of the way that criminal hackers work.

Criminal hackers specialize in understanding how a targeted network is configured today. The extent to which they understand every component and interface is the extent to which they can find exploitable vulnerabilities. And those weaknesses are even more vulnerable if the network owner doesn't know they exist.

So one of the first steps in protecting a network is understanding precisely what is there to be protected. There are a number of different commercial products that can help provide an inventory and map of a network. But for many smaller organizations, even lower cost tools can be difficult additions to the security budget. That's why the focus of this article is on free products that provide network visibility and monitoring.

Some of the products on this list are open source and some are not. Several of them may require an investment of time and effort to make up for the lack of a purchase price. Regardless, each of these could be a way for a security team to either get its first solid picture of its current network or augment the view provided by other tools. In either case, visibility is always a good thing.

We're curious; are there free or open source network discovery and monitoring tools that you use? Are there any that you've tried and abandoned? We'd like to hear about your experience — let us know in the comment section, below!

(Image: GoodIdeas VIA Adobe Stock)

 

Curtis Franklin Jr. is Senior Editor at Dark Reading. In this role he focuses on product and technology coverage for the publication. In addition he works on audio and video programming for Dark Reading and contributes to activities at Interop ITX, Black Hat, INsecurity, and ... View Full Bio

Previous
1 of 8
Next
Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
RuskinF
50%
50%
RuskinF,
User Rank: Apprentice
1/22/2020 | 11:25:43 AM
Re: Why not Jarvee?!
There have been so many options apart from Centreon like Jarvee Hosting, a closed source platform for improving the network visibility of your brand.

Correct me if I am getting wrong or posted in the wrong article.
tdsan
50%
50%
tdsan,
User Rank: Ninja
1/9/2020 | 3:09:16 PM
Re: Why not Centreon?!

Interesting, I would add "OpenNMS" to the list as well.




 

Todd

 

talmadge607
0%
100%
talmadge607,
User Rank: Apprentice
1/9/2020 | 10:35:50 AM
Why not Centreon?!
Hi, great post! You talked about Zabbix, Nagios Core ... Why not Centreon ?! Open source and a great community!
Zero-Factor Authentication: Owning Our Data
Nick Selby, Chief Security Officer at Paxos Trust Company,  2/19/2020
44% of Security Threats Start in the Cloud
Kelly Sheridan, Staff Editor, Dark Reading,  2/19/2020
Firms Improve Threat Detection but Face Increasingly Disruptive Attacks
Robert Lemos, Contributing Writer,  2/20/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
How Enterprises Are Developing and Maintaining Secure Applications
How Enterprises Are Developing and Maintaining Secure Applications
The concept of application security is well known, but application security testing and remediation processes remain unbalanced. Most organizations are confident in their approach to AppSec, although others seem to have no approach at all. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-8813
PUBLISHED: 2020-02-22
graph_realtime.php in Cacti 1.2.8 allows remote attackers to execute arbitrary OS commands via shell metacharacters in a cookie, if a guest user has the graph real-time privilege.
CVE-2020-9039
PUBLISHED: 2020-02-22
Couchbase Server 4.x and 5.x before 6.0.0 has Insecure Permissions for the projector and indexer REST endpoints (they allow unauthenticated access).
CVE-2020-8860
PUBLISHED: 2020-02-22
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung Galaxy S10 Firmware G973FXXS3ASJA, O(8.x), P(9.0), Q(10.0) devices with Exynos chipsets. User interaction is required to exploit this vulnerability in that the target must answer a phone call. T...
CVE-2020-8861
PUBLISHED: 2020-02-22
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-1330 1.10B01 BETA Wi-Fi range extenders. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue ...
CVE-2020-8862
PUBLISHED: 2020-02-22
This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DAP-2610 Firmware v2.01RC067 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from the ...