Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

25
votes
3answers
3k views

Does Skype technology tap a user's machine to route other calls?

I was surfing a random blog today (Enterprise video conferencing solutions vs Skype), and I came across a claim. I do know that the Skype protocol is a proprietary one, but the author of this blog ...
0
votes
0answers
17 views

Is there any way possible that a Digital certificate is issued by admin on wireless channel?

I want that an admin who is working in a wireless environment have to issue digital certificate to the node, who wants to register itself with the network. this certificate will be used by user to ...
0
votes
3answers
129 views

How a trojan allows attacker to connect to remote computer behind a router

According to this article on Wikipedia, a trojan horse can allow a remote connection by opening a random port if it is able to bypass the firewall. I'm not much of an expert of routers and Network ...
0
votes
2answers
94 views

How do I know that my connection is really encrypted?

I am using a VPN to ensure to encrypt my browsing. I wonder though if I could check somehow if the datastream really is encrypted?
-2
votes
0answers
67 views

Can anyone tell me what is going on in this traffic? [on hold]

9/8/14 4:51:26.015 PM mDNSResponder SendARP: No interface with InterfaceID 0000000000000005 found 34 252.70.102.100.in-addr.arpa. PTR [UNKNOWNCOMPUTER]-macbook-pro.local. 9/8/14 4:51:26.015 PM ...
1
vote
1answer
70 views

What network protocol is Crashplan using?

I have been using CrashPlan for a while internally (i.e. local backup server). I would also like to setup off-site backup but my experience is that I have to forward a port from the router sitting at ...
2
votes
1answer
51 views

How do you back up cardholder data remotely without a network connection?

In the PCI DSS version 3 it says: 1.3.3 Do not allow any direct connections inbound or outbound for traffic between the Internet and the cardholder data environment. But in the event of hard ...
0
votes
3answers
171 views

How to search for evidence of Camfecting (webcam hacking)?

I'm worried about camfecting (webcam hacking). The camera light on my mac (running OSX) is not on, but it isn't hard wired so that doesn't say a lot. I've ran a virus scan but no signs. Now my idea ...
0
votes
0answers
36 views

Block incoming traffic at home via static IP [migrated]

I have a static IP to be whitelisted on a number of services I have to use from home. However this means that my home router is now accessible by the web, ftp etc. My routers firewall (ASUS DSL-G31) ...
0
votes
0answers
37 views

calculate time taken to reach from network A to B without ping and telnet [migrated]

I want to find distance between A and B either in terms of network time or Hops count.I have few ideas like I can ping B from A will log down time taken to respond that ping request . Also If I know ...
2
votes
3answers
145 views

Are scanners secure?

I have a dead tree document. In order to reduce the risk of being compromised, I would like to digitize and encrypt the document, and then destroy the physical copy. Let's assume my computer itself ...
1
vote
2answers
149 views

What reliable methods are available for tracing the source of an ARP poisoning attack?

If an attacker on the network attempts to use ARP poisoning (spoofing) in order to redirect traffic to his own machine, what mechanisms and techniques are available for tracking the spoofed ARP ...
0
votes
1answer
78 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
2
votes
3answers
56 views

Will a switch only send data to its recipient?

I have an ISP supplied cable modem/router over which I have almost no control. They can upgrade the firmware remotely, so I assume they can do virtually anything with it. When I transfer data using ...
1
vote
2answers
87 views

Which encryption technique should be used for cloud computing data transfer?

I want to setup my application for cloud computing for Software as a Service. There is going to be a lot of data transfer between my server and client, to and fro. The technique I have envisaged is: ...
1
vote
1answer
77 views

Shared Key vs Pre-Shared Key

Does Shared key and Pre-shared key mean different thing ? Currently reading Text , Security+ Guide to Network Security Fundamentals.
2
votes
3answers
154 views

What's the difference between mitm attack and sniffing?

What's the difference between MITM attack and sniffing? Also could anyone name a few other attacks similar to those?
0
votes
4answers
119 views

More specific name for an inside attack

I have a scenario where I evaluate two different types of attacks on a distributed network of nodes (you may also call it a multi agent system). On the one hand the attacker is able to read incoming ...
2
votes
2answers
83 views

How to get rid of an Ad bot?

The issue started due to setting up a proxy server on a PC connected to my network. I then realized that all of my devices that connected to the network, including PCs and phones, are all infected by ...
1
vote
2answers
175 views

How vulnerable am I on a unencrypted public WiFi network? [duplicate]

I am enrolling myself into a college. College provides a Public WiFi Access Point, to access internet through its network, which is unencrypted (No password). As being a programmer for last one and a ...
0
votes
1answer
158 views

Hacking Gmail with 92 Percent Success - Does popular GUI framework designs reveal UI state change ?

The media has been claiming for the last 2 days that GMail can be hacked . http://www.cnet.com/news/researchers-find-way-to-hack-gmail-with-92-percent-success-rate/ They have based their ...
0
votes
1answer
32 views

Limiting account access based upon NIC used to connect on Linux

I have a server which has multiple NICs (ignoring redundant pairs): 'inward' facing production (connects to other servers); 'outward' external facing production (connects out to the internet via a ...
3
votes
1answer
119 views

What is the risk that Windows 8's loopback protection feature protects me from?

Windows 8 requires Fiddler to set up an exemption when sending traffic to localhost. Since this is a default setting (and affects many computers): What security benefit does this provide How can I ...
0
votes
1answer
57 views

internal proxy server vs DMZ proxy server

What would be reason for placing a proxy server in a Demilitarized Zone (DMZ)? I understand that a DMZ is a separate network to your internal network (lies inbetween internal network and firewall). I ...
0
votes
1answer
53 views

Identifying attacks by network activity

Is it posible (and how) to tell from a network dump if there is a buffer overflow attack, DoS or brute force attack? A DDoS would be more obvious to identify, but those attacks mentioned above I think ...
0
votes
1answer
43 views

Analyzing UPnP entries from home router

I'm using a tplink router for my home LAN and just noticed that in the UPnP section in its control panel there are two entries with App description: Teredo of tipe: UDP and ports: 55566 and 49868 How ...
-2
votes
2answers
98 views

Is scraping this website legal? [closed]

I'm thinking of developing a third-party client for Quora in Windows Phone. There are a few but they just run Quora in a mobile browser. The problem is there is no public or open APIs of Quora. And ...
0
votes
1answer
36 views

Throttle network based on OS [closed]

What do I need to learn/know to throttle a clients network based on his/her operating system. For example: Someone in my network using Kali Linux... I would like to throttle their traffic to ...
1
vote
1answer
57 views

how to trace or get evidence you've been hacked [closed]

my devices and my network have been compromised. I foolishly left my router unprotected and they were able to gain access to all my apple devices and then install some sort of software that will take ...
0
votes
2answers
164 views

What kind of attacks can happen on port 80

I am a novice to network security domain. For one of our clients, we are trying propose a network model where an Apache proxy/web-server which will be the only one that is exposed into the ...
1
vote
0answers
39 views

Traffic anonymization through routing - software and algorithms

I stumbled upon an interview with "the grugq" in which he is talking about how hackers anonymize their traffic, i.e. hide their original ip address (- this is also what I will mean by "anonymizing" in ...
1
vote
1answer
44 views

Can we build network topology using passive fingerprinting?

Can we use the tools such as P0f, OSSIM and other passive fingerprinting tools to build a comprehensive network topology of how the devices are interconnected ? or is there a passive finger printing ...
1
vote
1answer
92 views

DNS packets during ARP poisoning

I carried out an arp poisoning attack from my virtual machine to real machine with cain and able and collected data with wireshark from real machine. While I was investigating data with wireshark I ...
29
votes
6answers
3k views

Can malware be dangerous even when quarantined?

I am reading a book on network security and when talking about user confusion it writes: "It is not uncommon for a user to be asked security questions such as Is it safe to quarantine this ...
1
vote
2answers
135 views

Will an IP packet to the own IP address ever leave the computer? [duplicate]

I am working on a system that consists of several applicaitons communicating with each other. Some of these applications will run on the same server and some will run on a different one. So there is ...
2
votes
1answer
131 views

How to further analyze suspicious traffic

I've been monitoring my network traffic with Little Snitch, and today, when launching Chrome, just the default Chrome tab (shows most frequent sites), it alerted me Chrome was trying to connect over ...
5
votes
2answers
312 views

Is it possible to ping a LAN card through its MAC address? [duplicate]

As you can start a PC through its 'WAKE ON LAN' feature on private networks, can you trace someone's online status through their MAC address over the internet ?
1
vote
1answer
108 views

IT support and security concerns regarding local VM's

I started working at a large financial institution several weeks ago as a software engineer and despite every other aspect of this job being great, I am haunted by the constant restrictions that ...
0
votes
2answers
89 views

need network level security alternatives to a VPN

We have a set of servers hosted at a tier-1 provider, and they are currently behind a VPN running on a gateway machine and not accessible to the open internet. Due to VPN instability issues we've ...
1
vote
1answer
66 views

What Does Putting Each Subscriber of ISP in One Subnet of His Own Mean?

I've noticed that I used to be assigned an external IPv4 from my ISP and a 24 bit mask (255.255.255.0), then it changed to 255.255.255.255, today I was studying IPv4 subnetting and I understand that ...
1
vote
4answers
178 views

Are computers on same network as honeypot safe?

If a computer is setup as a honeypot and is on the same LAN with other computers, could other computers be attacked? My thought is that if an attacker infects a honeypot with a worm, this worm would ...
2
votes
1answer
144 views

How can I trace a user on my network?

I want to trace a user based on IP Address (or MAC Address) on a Network with about 10 L2 or L3 Switches. Is it possible to know that on exactly which switch and on which port a user with a specific ...
2
votes
1answer
99 views

When does one require netbios?

I've heard others talk of disabling netbios, but over the years I have never understood exactly when this protocol is required. The wikipedia page explains very abstractly what it is, but not which ...
1
vote
1answer
125 views

How do you stop a hacker with no IP and a dot for their HOST

The entry below is from the visitors log in c-panel Host: . /specific legimate-wordpress-post/ Http Code: 503 Date: Jul 24 09:28:06 Http Version: HTTP/1.1 Size in Bytes: 1118 Referer: ...
0
votes
1answer
92 views

what type of attack does LOIC do? [closed]

I have used LOIC (Low Orbit Ion Cannon) earlier . Today i was reading on wikipedia that there are many types of dos attacks , namely SYN attacks , HTTP flooding ,UDP flooding ,etc and two questions ...
2
votes
2answers
102 views

Get the browser history without using a browser

I would like to get the browsing history of a computer in my network (without running that web browser), is it possible?
0
votes
2answers
96 views

Blocking access to social media on Windows

I would like to block websites like Facebook, YouTube and other social sites as part of my job and would need your advice on how to manage that. There are about 120 PCs in the building. Is something ...
0
votes
1answer
66 views

Designing and implementing a secure epayments system with RESTful API

I want to design and implement an epayments system (I will not be handling credit card payments). The system will have a RESTful API. I am already familiar with RESTful servies, and have built a few ...
0
votes
1answer
62 views

Pivoting without meterpreter [closed]

Is there any way other than Meterpreter to pivot into the network? If yes, then please guide. I already know about Meterpreter, just want to know manual methods other than this.
-2
votes
1answer
153 views

good books for learning network and web security? [closed]

I am reading "Hacking The Art of Exploitation" book . i have read till chapter 2 programming but most of it has gone above my head . I want to learn basically cryptography , network security and web ...