the scripts linked above were not working for me. i've modified them to work with the latest release of debsecan and included a bit more background, prerequisites, and detailed instructions in this gist: https://gist.github.com/khimaros/21db936fa7885360f7bfe7f116b78daf