Security Administrator Tool for Analyzing Networks

SATAN (the Security Administrator Tool for Analyzing Networks) is a testing and reporting tool that collects a variety of information about networked hosts and was considered one of the best when written. In fact, it was the first truly user-friendly network scanner. It features an HTML interface, complete with forms to enter targets, tables to display results and context-sensitive tutorials that appear when a hole has been found.

SATAN was designed to help systems administrators automate the process of testing their systems for known vulnerabilities that can be exploited via the network. This is particularly useful for networked systems with multiple hosts. Like most security tools, it is useful for good or bad purposes - it is also useful to would-be intruders looking for systems with security holes.

SATAN is written mostly in Perl and utilizes a web browser such as Netscape, Mosaic or Lynx to provide the user interface. This easy to use interface drives the scanning process and presents the results in summary format. As well as reporting the presence of vulnerabilities, SATAN also gathers large amounts of general network information, such as which hosts are connected to subnets, what types of machines they are and which services they offer.

SATAN was developed in early 1995 and is not being further developed. It appears to have been replaced by [http://www-arc.com/sara/ SARA] (Security Auditor s Research Assistant). In 2003 insecure.org conducted a security popularity poll and developed this list of 75 network security analysis tools in order of popularity based on the responses of 1854 people. [http://www.insecure.org/tools.html]

For those offended by the name, the package contains a program called repent , which changes everything named SATAN to SANTA.