Secunia Software Inspector

Moderators: Moderator, Global Moderator

Post Reply
Tami
Administrator
Administrator
Posts: 0
Joined: Sun Apr 25, 2004 1:05 pm

Secunia Software Inspector

Post by Tami »

Secunia Software Inspector

Three Versions: Online Test, Personal Version, Network Version

Feature Overview - The Secunia Software Inspector:
* Detects insecure versions of applications installed
* Verifies that all Microsoft patches are applied
* Assists you in updating your system and applications
* Runs through your browser. No installation or download is required.

How Does it Work:
The Secunia Software Inspector relies on carefully crafted Secunia File Signatures to recognise applications on your system. The detected applications are then matched against our Secunia Advisory Intelligence to determine whether an application is up-to-date or not. The results are then used to advise you on how to update to more secure releases of the insecure applications.

Microsoft Windows Update is used to determine if your system is missing security updates from Microsoft.

The Secunia Software Inspector covers the most common/popular end user applications:
* Internet browsers
* Internet browser plugins
* Instant messaging clients
* Email clients
* Media players
* Operating systems
* View detailed list of applications

Please note.
The Secunia Software Inspector does not cover or include information about vulnerabilities not addressed by either a new version or a security patch. For information about unpatched issues in your software, we suggest that you look at our Product Vulnerability Report Pages.

The Secunia Software Inspector works by inspecting version information on your system and therefore it does not take into account if you e.g. applied a workaround to address a vulnerability.

Minimum Requirements:
* Windows 2000 SP4, Windows XP SP2, Windows 2003, or Windows Vista
* Sun Java JRE 1.5.0_12 or later
* Internet Explorer 6.x/7.x, Opera 9.x, or Firefox 2.x
* Latest version of Microsoft Windows Update

Personal Version

Purpose of the Secunia PSI

The Secunia PSI is available free of charge.

The Secunia PSI is an invaluable tool for you to use when assessing the security patch state of software installed on your system. It constantly monitors your system for insecure software installations, notifies you when an insecure application is installed, and even provides you with detailed instructions for updating the application when available.

It is NOT the purpose of the Secunia PSI to detect whether your system has already been compromised or if local changes, settings, or missing requirements could cause the Secunia PSI to report incorrect results. The Secunia PSI relies on the meta-data of executables and library files. The Secunia PSI does NOT conduct an integrity check of the individual files, rather, it checks whether a specific program is vulnerable according to the reported version numbers and not whether the files have been compromised or replaced by other users or programs.

The Secunia PSI is not a replacement for other security measures such anti-virus or personal firewalls, the Secunia PSI is a great supplement to other security measures such as anti-virus and personal firewalls as it helps preventing exploitation of often overlooked exposures.

Additionally, it is important to understand that the process of identifying insecure software installations on any system involves many different factors and, in rare cases, may result in incorrect detections. Should you encounter such a situation, please send us your feedback and all relevant information at support@secunia.com.

How does the Secunia PSI work

The Secunia PSI works by examining files on your computer (primarily .exe, .dll, and .ocx files). These files contain non-specific meta information provided by the software vendor only. This data is the same for all users, and originates from the installed programs on your computer - never from their configuration. Please read the privacy statement available at the bottom of this page and through the Secunia PSI application for more details about how information from your computer is used by Secunia.

After examining all the files on your local hard drive(s), the collected data is sent to Secunia's servers, which match the data against the Secunia File Signatures engine (https://psi.secunia.com/) to determine the exact applications installed on your system.

This information can then be used to provide you with a detailed report of the missing security related updates for your system.


System Requirements

The current list of requirements that must be met for the Secunia PSI to function correctly are the following:

Supported Operating Systems:
* Microsoft Windows XP - Service Pack 2
* Microsoft Windows 2003
* Microsoft Windows Vista
* Microsoft Windows 2000 - Service Pack 4
* US and European languages only

Privileges:
* To install and run the Secunia PSI you will need administrative privileges

Connectivity:
* Access to Secunia servers (encrypted) via SSL (https://psi.secunia.com:443/)
* Access to Microsoft Windows Update servers, see also WUA requirements below

Software Requirements:
* Latest version of Microsoft Windows Update Agent (WUA)

You can determine whether or not you are running the latest WUA by visiting "http://windowsupdate.microsoft.com/". If you are able to check your system for missing updates through this tool, your system should function properly with the Secunia PSI.
Last edited by Tami on Wed Jan 16, 2008 6:15 am, edited 1 time in total.
Image

[color=\"#41211C\"]It takes years to build up trust and only seconds to destroy it

[/color]
Post Reply

Return to “Security”