SQL Server Developer Center > SQL Server Forums > SQL Server Security > Need help with vulnerability scanning & penetration testing
Ask a questionAsk a question
 

AnswerNeed help with vulnerability scanning & penetration testing

  • Saturday, October 31, 2009 11:09 AMjustinmann Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    I need help in finding tools which will allow me to scan for vulnerabilities, monitor access rights, run penetration testing and monitor user activity on sql server 2008. I do not want to spend too much money so please suggest some inexpensive yet reliable tools.

    Thanks in advance
    _Justin

Answers

  • Saturday, October 31, 2009 7:22 PMLekss Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    I dont think there are tools with these kinds of functionlaity and come for free.
    But anyway have you had a look at SQLSECURE ? I think this might be a very good option in your case.
    Thanks, Leks
  • Monday, November 02, 2009 10:06 AMMelanieDeNittis Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Justin,

    There are a lot of different security assessment tools available in the market. The best way is to google it and see which one best fits your needs.

    A while back I evaluated an audit tool 'Secure Auditor'. It lets you scan and audit your network for vulnerabilities and shows them in a report form. It also lets you run different penetration tests like dictionary attacks, brute force attacks and hybrid attacks and it has a user access rights auditor utility as well. You'll have to check out the software to see if it will help you monitor user activity. I suggest that you download the trial version and test it first.

    Melanie DeNittis

All Replies

  • Saturday, October 31, 2009 7:22 PMLekss Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    I dont think there are tools with these kinds of functionlaity and come for free.
    But anyway have you had a look at SQLSECURE ? I think this might be a very good option in your case.
    Thanks, Leks
  • Monday, November 02, 2009 10:06 AMMelanieDeNittis Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Justin,

    There are a lot of different security assessment tools available in the market. The best way is to google it and see which one best fits your needs.

    A while back I evaluated an audit tool 'Secure Auditor'. It lets you scan and audit your network for vulnerabilities and shows them in a report form. It also lets you run different penetration tests like dictionary attacks, brute force attacks and hybrid attacks and it has a user access rights auditor utility as well. You'll have to check out the software to see if it will help you monitor user activity. I suggest that you download the trial version and test it first.

    Melanie DeNittis