DragonSoft Vulnerability Management for small and medium businesses (DVM-SMB)

DVM-SMB functions include Network Vulnerability Audit, Account & Equipment Audit Scan and Risk Evaluation and Analysis Support. DVM-SMB had enhanced the core of security Vulnerability Scan Engine that possess high capability, steadily and accurate function including newest exploit technology and supplies more than 2700 audit items of network security vulnerabilities from vulnerability knowledge database, and the database had already passed the CVE(Common Vulnerability and Exposure) certificate.

DVM-SMB provides complete risk assessment report for OS(Windows 9x/NT/2000/XP/2003, Sun Solaris, BSD, and Linux). It is user friendly interface that user can easily understand and scan 1 class C (255 hosts) in intranet at a time.

Technologies:

FPP (False Positives Prevention)
When DVM-SMB perform vulnerability assessment, FPP technology will accurate check which network service is executed, and then check the associate vulnerability.
PSF (Protocol Signature Filter)
The PSF (Protocol Signature Filter) technique identifies users' operating system correctly. DVM-SMB can identify OS, it will show that, or else show unknown. This technique isn't the same with finger printer.
RAS (Remote Access Scanning)
Without authentication, DVM-SMB can execute remote access scan for specific security hole (Windows RPC vulnerability).
AIS (Artificial Intelligence Skill)
Unlike most other network security scanners, DVM-SMB doesn't make assumptions about typical protocols running behind specific ports. Instead, the DVM-SMB accurately analyzes the input/output data on each port to determine which protocol and service is actually running.
VHA (Virtual Hacker Attack)
DVM-SMB could imitate hackers' thought to find out exposures in your network hosts, device (firewall, router). User can fix the security vulnerability after receiving the scan report form DVM-SMB.

Function:

Main Functions:

Windows graphical operation interface, DVM-SMB can be operated under the operating systems of Windows 2000/XP/2003.
Authorizing 255 IP (one specific sector of intranet) for network auditing.
Effectively synchronous scanning Multi-Thread, Multi-Host.
Supporting HTTP proxy and Anti-Redirect.
Giving firewall obstructing suggestions for the high-risky IP/PORT.
Providing password protecting service.
Using total English/Chinese for user interface, secure audit message, and improving suggestion. (Chinese and English 2 version available)
DVM-SMB can inquire about any TCP/IP, includes Windows and UNIX server and workstation.
While scanning, DVM-SMB can immediately display the messages and the vulnerabilities that were detected.
DVM-SMB possesses the exclusive technique to uncover unknown vulnerabilities. It is able to think like a hacker or network security analyst attempting to penetrate users' network.
DVM-SMB holds an exclusive FPP (False Positives prevention) detecting system.
DVM-SMB owns Protocol Signature Filter technique.
DVM-SMB can scan every kind of Web server, Email server, FTP server, and remote access server.
Supporting HTTP proxy and Multi-Thread HTTP scanning.
DVM-SMB owns artificially intelligent scanning technique.
Providing Auto-Fixing function. Allows the network administrator to automatically correct common system security issues including registry settings, file permissions, and more.
Supporting information inquiry for Whois host.
Providing inspecting function for account and password of NetBIOS.
DVM-SMB can audit the vulnerabilities of network hardware.

Customizable Functions:
Audit policies of the COM port and its range can be customized. DVM-SMB also possesses speedy scanning and multi-IP inquiry abilities.
The reliabilities of Thread, priorities, Ping Timeout, and Data Timeout can be customized.
By using DVM-SMB, users can set alert sound when finding vulnerabilities.
Providing password protecting function when starting DVM-SMB. The Functions of Report:
Supporting a single audit for a large number of hosts, then generates individual report according to designate IP.
The reports provide a rank for the 6 hosts which have the most vulnerabilities.
The auditing results provide operating system distribution statistical graphs.
The auditing results provide network service distribution statistical graphs.
The auditing results provide Host Summary Map administer forms.
Providing network distribution homologous forms for the audit hosts and Gateway.
The reports provide firewall resisting suggestions for those highly-risky IP/PORT.
The vulnerabilities detected by DVM-SMB could be followed the examples of CVE, BugTraq, and X-Force.
Supporting patch downloading of English and Traditional Chinese version.
Generating Customizable Reports.

Updating Functions:
Supporting the audit of module updating.
Providing the function of update alerting.
DVM-SMB can automatically obtain and update for the product itself through proxy server. Audit Functions:
Vulnerabilities auditing includes:
Domain Name Server (DNS)
Finger Service
File Transfer Protocol (FTP)
Trivial File Transfer Protocol (TFTP)
HTTP Security, CGI and WinCGI
NetBios System
Network File System (NFS)
Windows NT Security
Mail Server (SMTP, LDAP, POP, IMAP)
RLogin Remote System
Remote Procedure Call (RPC)
Simple Network Management Protocol (SNMP)
Telnet, SSH Service
Xwindows System
Server Message Block (SMB)
Network News Transport Protocol (NNTP)
Remote Shell (RSH)
IDENT Service
RWHO Service

System Requirements:

Pentium 266 MHz CPU

Windows 2000-SP4/XP/2003 or Higher

256MB DRAM (Recommend 512MB DRAM)

2GB Free Disk Space

Internet Connection

CD-ROM Drive

Internet Explorer Version 5.0 or Higher

The Best Security Vulnerability Management Solution for Enterprises

DragonSoft Vulnerability Management is in charge of "testing" and "improving" in the whole Security Wheel. DVM can identify the newest known vulnerabilities, provide completed reports and guiding for vulnerabilities scanning and management tools to help eliminating the vulnerabilities and the exposures. The regularly updating function can update the vulnerabilities database and module.

The vulnerabilities management data carried by DVM can not only quickly manage and eliminate the vulnerabilities, but also can alert risks and do auto risk-managing. Therefore, DVM can be integrated with Security Managers, Firewalls, and IDS/IPS tools, so that it can provide a total solution for vulnerabilities assessment and immediate event managing.

Copyright © 2000 - 2012 - CyProtect AG. - All rights reserved.
Contact: info@cyprotect.com - CyProtect AG, Schatzbogen 58, 81829 Munich, Germany
Sales Hotline: +49 89 420447-20 Technical Hotline: +49 89 420447-30 Fax. +49 89 420447-79