Re: Tenable license discussion - Nessus engine

On Wed, Jan 26, 2005 at 05:02:09PM -0500, Jonathan Jesse wrote:
> It might be an interesting experience to hear what actually happens on
> Microsoft Patch Tuesday.  
> How many open source submissions do you actually receive on that day?  

Recently, zero.

> How soon after a patch is released does a test get deployed?  

It depends on the patch. Basically, we do two things:

- When the bulletins are published, we immediately make
registry checks. They are usually done within 30 minutes
after the bulletins have been made public (testing
included) ;

- Then, for remote flaws (ie: WINS, for Decembers' Microsoft day)
we reverse engineer the patch to produce a network-check (no credentials
required). That is, if it's possible to do so. It took a few hours
for WINS - I think around 12 hours.

> Then how long do we have to wait until it is part of
> the feed?  I think the answer to the last question is 7 days if I recall
> from an earlier post.

Correct.


                        -- Renaud
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus