Chapter 1
Engagement Management
Course: Comptia Pentest Pt0 003
Subject: Comptia Pentest Plus
Chapter: Vulnerability Discovery And Analysis
Vulnerability discovery is a critical process in cybersecurity that involves identifying security weaknesses in software, infrastructure, and networks before attackers exploit them. Various scanning techniques are used depending on the target system, environment, and security objectives. Below are the key types of scans used for vulnerability discovery.
Types of Scans in Security
Security scanning is crucial for ensuring the integrity, confidentiality, and availability of applications and infrastructure. Various scanning techniques are used to detect vulnerabilities, misconfigurations, outdated dependencies, and security risks. One key area of security scanning involves container scans, which are essential for securing modern DevOps and cloud-native environments.
1. Container Scans
Container security scanning involves analyzing containerized applications to detect vulnerabilities, misconfigurations, and outdated dependencies. Unlike traditional security scans, container scans focus on images, running instances, and the orchestration layer (e.g., Kubernetes, Docker, OpenShift). Containers package applications with all required dependencies, but this packaging can also introduce security risks if vulnerabilities exist in base images, libraries, or runtime configurations.