WHATARETHETHREECOREKEYSKILLS.pptVIP

COMP1321Digital Infrastructures Richard Henson University of Worcester April 2016 Week 21: Web Communications - Securing Web Pages Objectives: Explain the principles of hacking ethically Access and exploit a “test” client site Explain “Footprinting” and reconnaissance from a penetration testers perspective “Passively” scan networks from the outside Ethical Hacking Principles Hacking is a criminal offence in the UK covered through The Computer Misuse Act (1990) tightened by further legislation (2006) It can only be done ”legally” by a trained (or trainee) professional a computing student would be considered in this context under the law Ethical Hacking principles Even if it is legal… doesn’t mean it is ethical! Professionals only hack without owner’s permission if there is reason to believe a law is being broken if not… they must ask permission otherwise definitely unethical (and possibly illegal) Ethical Hacking Principles What is “hacking”? breaching a computer system without permission How is it done? using software tools to get through the security of the system also called penetration testing (again… if done with permission…) Penetration Testers Toolkit Many penetration testing tools available Also a body of knowledge that shows how to use them… Together, provide the expertise to penetration test a client’s site but this should only be undertaken with the client’s permission… Preparing to use a Toolkit Ethical Hacking Professionals need to be familiar with both Windows Server, and Linux To fully engage with principles of penetration testing,install the following as virtual machines on your own computer: Windows 2008 Server Linux, with Backtrack (as VM) … Remember: this should only be used ethically! Instead, you may wish to just take an overview (plenty of excellent youtube videos) Reminder of Virtualisation… The use of software to allow hardware to run multiple operating system images at the same time Possible to run Windows OS under Mac OS run multiple