Asset Detection in Nessus ScannersĪsset detection in Nessus scanners is performed by a number of Nessus plugins. Other metrics, such as Asset Exposure Score (AES), rely on core VM information, and consequently on asset inventory information too. risk-based VM (RBVM), precisely computing cyber exposure metrics for Lumin.įor Lumin metrics such as Asset Criticality Rating (ACR), the impact of asset inventory information is direct, as ACR is computed based on device type and capabilities.core vulnerability management (VM), which heavily relies on the data points such as installed software and version and.

increasing asset visibility and revealing blind spots.However, the impact of these capabilities is substantial for: While the Nessus scanner is well known for its ability to detect vulnerabilities, its capabilities to retrieve inventory information from the network may be slightly less known. Therefore, the accuracy of these checks depends on precise platform, software, version and patch information coming from the assets. Most vulnerability checks rely on publicly available information regarding the specific platforms and versions affected. Once you've identified all your assets, you need visibility into each of them in order to gather accurate information to assess your risk. Any assets that are not properly managed pose additional risk. With the attack surface continuously growing in size and complexity, it is more critical than ever that you identify all the assets in your network - not just your core IT assets but also any assets related to operational technology (OT) as well as any ' shadow IT' assets. Here's how the asset detection process in Nessus scanners can help.Ĭompiling a complete asset inventory has always been a prerequisite for effective core vulnerability management (VM). Building a precise inventory of existing assets across your attack surface is essential for effective vulnerability management.

How to use nessus badlock detection