Search This Blog

Monday, December 6, 2010

SSA - Security System Analyzer 2.0


SSA (Security System Analyzer) is free non-intrusive OVAL and XCCDF based
scanner. It provides security testers, auditors with an advanced overview
of the security policy level applied.

What's the goal of SSA ?

Making Open Standard Security Assessment EASY !!

Getting Started ?

- Choose your standard
- Choose your policy
- Choose the baseline and Click Scan. That’s IT !!!

When did i expect SSA v2.0 Final Release ?

When i successfully implement the following features.

- Fully support of open security standards and initiatives (CVE, OVAL,
CCE, CPE, CWE, SCAP, CVSS)
- Multiplatform support (Windows, Linux, OS X)
- Comprehensive Graphical Dashboard
- Report Management


What's new in this release 002 ?

* Added the support of XCCDF 1.1.4
(http://scap.nist.gov/specifications/xccdf/)
* Display Pass / Fail testcase
* Associate Testcase to CCE reference
* Added 2 news Baselines USGCB / SCAP for IE8 and Windows 7 x86
* Added export to CSV
* Added new directory for logs
* Added the ability to maximize Windows
* Added a new community page http://teambox.com/public/ssa-v2-beta
* Fixed many bugs

My huge thanks for testing beta001 to:

- Thierry Zoler
- Jerome Athias (NETpeas.com team)
- Mouad Zahrane (NETpeas.com team)
- Maximiliano Soler
- Fernando Figueroa.

Get your copy and stay tuned with new coming released at

http://code.google.com/p/ssa/

Next Iteration Beta 003 with Database Support and Report History Management.

Stay Tuned

SSA is now fully sponsored by NETpeas (www.netpeas.com)

N.OUCHN
CTO at NETpeas

No comments:

Post a Comment