Abstract

Vulnerability assessment aims at identifying weaknesses and

vulnerabilities in a system's design, implementation, or
operation and management, which could be exploited to violate
the system's security policy. The overall scope of vulnerability
assessment is to improve information and system security
awareness by assessing the risks associated. Vulnerability
assessment will set the guidelines to close or mitigate any risk
and reinforce security processes. Furthermore it will form an
auditable record of the actions performed in protecting from the
most current vulnerabilities.

The purpose of a network-based vulnerability

assessment is to identify the weaknesses and vulnerabilities
visible and exploitable on the network.
This presentation describes a complete methodology of
network-based vulnerability assessment