A Performance Comparison of Vulnerability Detection between Netclarity Auditor and Open Source Nessus

摘要

Network vulnerability detection is an important procedure to ensure that the organization network is secured. Traditionally, there are 2 types of vulnerability detection tools (Hardware and Software), which their cost are different. Thus, this paper is a performance comparison of vulnerability detection tools on the Rangsit University network and the Royal Thai Army network by using the hardware i.e., NetClarity Auditor, and software i.e., Open Source Nessus. There are three features for comparison as follows: 1) the searching ability, 2) the scanning time, and 3) the ability of vulnerability detection. From experiment, it is shown that 1) NetClarity Auditor gives a better searching performance than Nessus, 2) the scanning time of Nessus is shorter than NetClarity Auditor, and 3) NetClarity Auditor introduces a better ability of vulnerability detection than Nessus.