|
|
|||
| Rule General Information |
|---|
| Release Date: | 2021-03-11 | |
| Rule Name: | Scanner AppScan Detection | |
| Severity: | ||
| CVE ID: | ||
| Rule Protection Details |
|---|
| Description: | AppScan is a Web application security scanning tool from IBM that performs security penetration tests on Web sites and scans for common Web application security vulnerabilities. This rule is used to detect the scanning behavior of the scanner AppScan. | |
| Impact: | Attackers use scanners to scan targets, may find vulnerabilities in the target system, resulting in system information leakage, and then attack the system to obtain system permissions. | |
| Affected OS: | Windows, Linux, Others | |
| Reference: | ||
| Solutions |
|---|
| 1. If scanning behavior from an unknown IP address is determined, block the IP address immediately. 2. ensure that the file system permissions of Web servers and applications are set properly, and restrict access to sensitive files and directories. 3. ensure that systems and applications are updated to the latest version and fix known vulnerabilities to reduce the impact on the system. |