网络安全-工具-tools.pdfVIP

Practical Network Security: Basic Tools Techniques Guevara Noubir Northeastern University noubir@ Counter Hack Reloaded, Ed Skoudis, 2005, Prentice-Hall. Taxonomy of Discussion Points   Threats: Basic Network Recon and Info Gathering   Threats: More Intrusive Probes and Scans   Threats: Network Vulnerabilities   Network Architecture Vulnerabilities   Denial of Service (DoS)   Threats: Application/OS Vulnerabilities   Remote to Local (R2L) Attacks   User to Root (U2R) aka Privilege Escalation   Attacker Access Maintenance (root kits, etc)   Defenses Reviewed   Firewalls, Intrusion Detection, etc. Network Security Practice – Tools 2 Recon Info Gathering   Social Engineering: “the weakest link”,   Physical or automated (e.g., phishing)   Defenses: user awareness /document.asp?doc_id=111503WT.svl=column1_1   Physical Security   Physical access, Theft, Dumpster diving   Defenses: Locks, Policies (access, screen savers, etc.), Encrypted file systems, Paper shredders /5056749/mi6-camera-with-secret-images-bought-on-ebay-for-30   Web Searching and Online Recon   Check company website, get contact names, look for comments in html, etc.   Use Search Engines: Google!, Usenet to discover technologies in use, employee names, etc.   Defenses: “Security Through Obscurity”, Policies Network Security Practice – Tools 3 Recon Info Gathering   Whois database via Internic (.com, .net, .org)   Publicly-available starting place for determining contacts, name servers, etc. for a given domain [/ whois.html]   Network Solutions (edu), , , Allwhois   Q