Uni paper - how to reference a large report produced for the paper?

ivrytwr3

ivrytwr3

ivrytwr3

Soldato
Joined
25 Aug 2006
Posts
6,963
Sorry for the title!

I am preparing a paper that covers Pen Testing, during this process i ran 2 x vulnerability scanners; 1 generated a 20 page report and the other a 124 page report!

All of the info is relevant so how do i reference it? A link in the paper to the document stored on a fileserver? Put it as an Appendix? Or...............?

Ta!
 
It's a target network scan which gives an exec summary of the vulnerabilities found then describes each in detail, solutions, exploits etc, so all relevant - so you would really appendix a 124 page doc?
 
Ask your tutor
Click to expand...

[sarcasm] well i never thought of that! [/sarcasm]

I posted this at 2335 when i was writing the paper, i don't think my tutor would appreciate me calling at that time. I asked here in case others had to do something similar and wished to benefit from their experience.
 
Last edited:
Host it on an FTP server and link to it in the appendix with (Hard copy available on request)

Or a brief summation of the points raised from it within the context of the paper followed a link to the full version.
 
Bah! Well i emailed the tutor and he answered one of my questions, but not the one relating to the large report; i have sent another email! However, as the due date is looming i need to be proactive and just do it myself.

So, as some of you seem to think it's ok to add a weblink to the paper, does anyone know a good site that will host the report for at least a couple of months, so when the tutor does actually come to mark and click the report the file still actually exisits!!

Thanks.
 
pitchfork said:
Host it on an FTP server and link to it in the appendix with (Hard copy available on request)

Or a brief summation of the points raised from it within the context of the paper followed a link to the full version.
Click to expand...

This, or just say the whole report is available on request.
Make sure you detail how it was generated.
 
Judgeneo said:
Make sure you detail how it was generated.
Click to expand...

Can you expand on this more?

I used the trial version of Nessus (full access for 7 days) and it was the basic scan i ran on the target IP address.

The only things i actually had to input was the name given to the scan, the target IP, hit start and then > export to pdf!!!
 
ivrytwr3 said:
Can you expand on this more?

I used the trial version of Nessus (full access for 7 days) and it was the basic scan i ran on the target IP address.

The only things i actually had to input was the name given to the scan, the target IP, hit start and then > export to pdf!!!
Click to expand...

So make sure you say that the trial version of Nessus was used, give the version date of the software. That you used the software in its standard configuration, conducted a basic scan, and detail the IP range(s).

The key point is that another person should be able to replicate your data.
 
You can still 'reference' work that hasn't been published or is available online so just just refer to it by the name of the report, the date, and authors etc.

If you are refering to a specific finding or piece of data/analysis from the other reports use a standard [1] style reference where appropriate with the sources then listed in your references section. If you just want to include it for relevant background reading then list the report in the bibliography. If you wish to reference substantial amounts of data then perhaps shove it in an appendix.
 
Judgeneo said:
So make sure you say that the trial version of Nessus was used, give the version date of the software. That you used the software in its standard configuration, conducted a basic scan, and detail the IP range(s).

The key point is that another person should be able to replicate your data.
Click to expand...

Nice! That makes perfect sense. I always tell my little lad to write his work as if the person reading has no prior knowledge of the subject - i have failed to follow my own advice!!!
 
I'd just print the report and shove it in as an appendix and then in you actual paper just pull out the bits you need referenced back to appendix x page xxx saves any doubt and will only take two minutes and cost very little if you duplex it up.
 
this is all distance learning and so no physical report. My concern is my actual report runs to about 25 pages, then there are 2 x scan reports which are a further 20 pages (OpenVAS) and 125 pages (Nessus). I really don't fancy adding these 2 reports as appendixes so my report runs to approx 200 pages - seems overkill!
 
All of it is - i say that because:

Summary

Critical High Medium Low Info Total
1 9 16 3 28 57
Click to expand...

The report breaks each vulnerability down explaining what it is, how to exploit, how to mitigate etc, perfect as i have to talk about exactly that.
 
You must log in or register to reply here.
Back
Top Bottom