Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
1answer
72 views

Identifying the correct ssid

Suppose a wifi network is present with a given ssid.Now I create a hotspot with the same ssid as that of the original network.If a user tries to connect to the wifi , which one will he connect to?Also ...
3
votes
1answer
86 views

Any tools like PuTTY for manually stepping through network communications?

Are there any tools that would allow me to "manually" step through the network-stack processes of a device connecting to a network and communicating with other devices? Similar to using PuTTY to ...
1
vote
2answers
151 views

VyprVPN (from GlodenFrog.com) weirdly keeps sending unauthorized suspecious data even after uninstall [closed]

Update: Check the VyprVPN's app developer answer below, seems this is okay and an uninstaller is added to new versions to prevent such issues. Original: I was working with VyprVpn a few months ago, ...
-1
votes
0answers
48 views

LAN cable unplugged but still connected to network. How is this possible without WIFI Card? [closed]

Using Windows 7 on a PC with only LAN cable connection (no wireless card installed) to a Wireless Router with a Laptop using Windows 7, 2 latest model Android Phones, & a SMART TV connected ...
1
vote
0answers
35 views

Host-based security architecture for web server network

I am begining with network security and after studying for a while about often used technologies I got to this architecture for my home server (sorry it is not in english). I considered 3 basic ...
0
votes
0answers
35 views

Dangers of not using VLAN VS dangers of a virtual firewall appliance

We are hosting some customers on vps. Theses customers can access their vps with root access. We do not manage their vm, unless they request assistance. We recently build a high availability cloud ...
1
vote
2answers
77 views

NMap to scan a private subnetwork

I have a test network setup based on virtual machines. My host machine, a web server and the firewall is under the 192.168.0.0/24 network (gateway is 192.168.0.1); a server machine is located behind ...
3
votes
1answer
76 views

Is it possible to sniff traffic of a remote network? (With admin access to router)

Me and a friend of mine are simulating a widespread scenario where router configurations are untouched (default passwords) and are visible from the internet. Him, acting as the victim, will constantly ...
0
votes
1answer
49 views

Can I tell if a python script is secure from transmitting sensitive data by analyzing its imports?

A thought experiment My goal is to know whether, and how, a 3rd party python script that may be entrusted with sensitive information, can be trusted on a fundamental level. Basically this question ...
2
votes
1answer
64 views

running botnet for analysis

I a very curious to understand botnets practically. I want to run a p2p botnet (storm or waledac) for analysis and learning. I have mainly two issues: Where can i get access to binaries of either ...
0
votes
3answers
111 views

Is my LAN infected?

I don't know if this is the right place for this question but here it goes... When I access websites that have Google ads included with a device (pc, tablet, laptop) connected to my LAN, these ads ...
0
votes
1answer
88 views

Analyzing a TLS connection?

Suppose I want a secure TLS communication between me and myschool.edu. Which of the following should I trust to preserve confidentiality, integrity, and authenticity. Here are the options and my ...
2
votes
1answer
85 views

Forensics - trace back DNS query origin on host?

So I tried to search the web for answers but didn't find any. Is there any way to trace back which exe file or application caused the computer to make a specific DNS query?
18
votes
3answers
1k views

Are open wireless networks unencrypted?

When you connect to an open wireless network (that is, a wireless network without any symmetric password set) is there any sort of secure key exchange going on, or is data sent back and forth ...
2
votes
2answers
48 views

Can a website detect which method you are using to connect (LL2P, SSTP and PPTP)

When you connect to a website using a VPN with the same IP however using a different type of connection each time (LL2P, SSTP and PPTP) can the website detect the difference between these connection. ...
2
votes
3answers
150 views

Most secure location of database

Let's say I have a straight forward completely database driven web site application and I store my database on my web server in the DMZ. I won't be broadcasting the IP address of my database because I ...
0
votes
0answers
63 views

Blocking rogue DHCP in network [migrated]

I'm living in a dorm that has a large network and lots of people connecting their routers to get wifi. Is there any way for me under Windows 7 to only accept IP's from a defined MAC / not accept any ...
-1
votes
0answers
29 views

How to forward external port to Kali Linux? [migrated]

I have an issue about networking. My previous question was about how does metasploit payload work? And I got right answer( I have to redirect port to internal ip which corresponds to Kali Linux's ip). ...
39
votes
5answers
6k views

Bring your own phone to a (new) job: Consequences?

I am starting a new job, and I have the choice to receive a phone from the company, or bring my own phone. I am considering using my own phone, to avoid having an extra device, but I want to better ...
2
votes
2answers
70 views

What will happen to my Windows PC if I visit a site from a network marked as malicious by google safebrowsing [closed]

Google rated a whole network in china as malicious: http://www.google.com/safebrowsing/diagnostic?site=AS:4134 Quite a few of our customers have their websites hosted in that network (e.g. ...
0
votes
0answers
19 views

How do TSC (TKIP sequence counter) calculate into WPA?

I'm reading about 802.11, from IEEE's pdf (IEE pdf), from page 1191, and in particularly I'm reading about TKIP. And to decrypt and to encrypt used a TSC (TKIP Sequence Counter) as you can see in ...
3
votes
2answers
135 views

How can you transmit data without revealing your location?

Anyone can pick up wireless transmissions without revealing their location, but transmitting is much harder. What types of wireless communication systems are there that a device can use to transmit ...
1
vote
1answer
62 views

How can I get EAPOL packet's number?

I need to work with EAPOL packets, and I have to distinguish between first, second, third and fourth... If I'm using WPA2 I can use the first 2 bytes of Key Information field, and I can use Key MIC, ...
6
votes
0answers
76 views

WPA2 ephemeral key derivation

I'm trying to learn how ephemeral keys in WPA2 4-way handshake are derived. Starting from 4 EAPOL packets sniffing, I successfully derived PMK and PTK reading ANonce, SNonce, and knowing ASCII-PSK ...
0
votes
2answers
79 views

Is there any reason that captive portal server can't block the ICMP echo request/reply packet

We can get connected to those public WiFi hotspot without the account but can access to no website but the login page. As I tested, all those login website would respond to my ping even I was an ...
-1
votes
4answers
218 views

How to find out if somebody is spying on my private browsing data in the same WiFi network? [closed]

I live in a hostel and eight people including me, are using the same WiFi network. One of my friends is a "computer wizard". I would like to know if he is secretly checking my browsing history and ...
3
votes
1answer
145 views

Secure Connection between two mobile (Android and/or iOS) devices

I've a Device A which will communicate with multiple devices on a network (BLE and/or NFC). All the devices will be handled a Token upon authentication which somehow needs to be transferred over to ...
2
votes
1answer
47 views

Terms for input/output to and from a Firewall

Is there an official/standard term for the stream of data sent into or out of a firewall? Obviously the inbound traffic would be the traffic under surveillance, and the outbound traffic would be the ...
4
votes
2answers
573 views

How to use a port scanner in a hostile manner

Port scanners like nessus and openvas are basically used to identify the vulnerabilities of the network. My question is if someone with bad intentions is able to use these legal tools in a more ...
2
votes
0answers
62 views

How do I allow for anonymous encryption? [closed]

I have a protocol I am designing that requires anonymity and privacy. My idea is to have a minimum number of hops in the network before the message can be sent to its intended destination. The ...
2
votes
1answer
53 views

Updating privacy/security-concerned applications [closed]

Lets say we have a decentralized open source p2p chat client meant for secure communication. The main attack vector seems to be the (centralized) update mechanism. What methods and/or techniques can ...
1
vote
1answer
34 views

Security issues with multiple interfaces

Say I have a server with multiple interfaces. I wish to configure each interface as different IP addresses (and host name). Is it advisable, on a security standpoint, to do that? I have an application ...
4
votes
1answer
125 views

Accessing user accounts without asking for their password

I don't like asking my (windows network) users for their passwords, it doesn't seem like a good security practice. I also want to train my users to never give their password to anyone if they ask for ...
1
vote
0answers
75 views

Information Security classification [closed]

I've been interested in IT security for a bit (~1 year) and had a bit of experience with NSM as well as web security. I want to have an overview of the entire industry, with all relevant niches and ...
2
votes
0answers
51 views

Snort alerts analysis (web interface) [closed]

I have a question about Snort (or maybe any other IDS/IPS, any working solutions would be ok). The goal is to set up some web interface providing a way to view the whole TCP stream packets of each ...
-2
votes
1answer
67 views

Stuxnet - The background functions [closed]

Stuxnet was a clever worm that aimed to malfunction programmable logic controllers on nuclear networks (Iran was the most affected). Nuclear networks were private networks, not supported on Internet ...
0
votes
0answers
24 views

Does NDP (Neighbor Discovery Protocol) reduce ARP (Address Resolution Protocol) attacks?

I read the comparison of NDP with ARP but am uncertain if NDP does reduce any amounts of ARP attacks, given that with NDP, ARP is not used for address resolution. For the discussion to be specific, ...
1
vote
1answer
124 views

Is using Chromecast “a security nightmare”?

I'd like to use Chromecast on our office network. Doing so requires enabling UPnP (Universal Plug and Play). A quick search turns up statements like this: The US Department of Homeland Security ...
1
vote
0answers
51 views

ARP poisoning question

I'm writing a program that detects ARP poiosoning. My question is: How can I b sure my LAN hasn't been poisoned? Yes, I can use my settings and find the IP address of the default gateway and yes I ...
2
votes
1answer
167 views

TLS 1.3 Makes Security Tools Obsolete?

I am a student and relative noob in IT security performing research for three reasons: school, my employer and personal curiosity, and I hoped maybe someone could answer a question for me. In a video ...
-1
votes
1answer
83 views

How do bits transefer over wire? [closed]

i was tackling with networking and cannot seem to understand How bits are transferred over wires in the first place what counts for each of 0's & 1's
1
vote
1answer
47 views

Belkin wifi netcam cloud storage [closed]

If my net/router turns off with the belkin netcam will i still receive video if the motion sensor is activated? I was considering purchasing one, but if all that needs to be done is simply turning off ...
0
votes
1answer
50 views

Setting up a secure Ad-Hoc network

I am taking my laptop with me on a school bus trip, and I want to use an Ad-Hoc network to host a multiplayer Minecraft server. I have heard, however, that Ad-Hoc networks have a vulnerability that ...
0
votes
2answers
75 views

Inspecting every packet leaving the system for sensitive information ? [closed]

Is there a way to check every packet leaving the system for sensitive data like IP addresses, personal information (like logins) etc ? A free (and preferably open source) program which does this for ...
-4
votes
1answer
45 views

What is the most secure way to protect a custom CMS from infiltration? [closed]

I have a custom CMS with a randomly generated ASCII 100-character string from this site for both my username/password. I also have this following sha512 encryption system, which was created by ...
1
vote
0answers
32 views

Is a direct SIP video call (encrypted) between two computers more secure than going through a registrar service?

I learned recently about ZRTP-encrypted video calls using an SIP client, such as Jitsi or Linphone or Blink. I was able to make a direct encrypted video call between two clients on the same local ...
3
votes
1answer
262 views

Is my server being used as a proxy or being attacked?

I have an Ubuntu, Apache, Passenger, and Rails 4 project on AWS EC2. I am a beginner full stack developer and am unfamiliar with the security and server side of my project. Recently, my site was ...
1
vote
1answer
57 views

Secure point to point remote access to NAS drive

This question is very similar but also distinctly different (How do I ensure data encryption on Samba transmission on *NIX systems?) I'm looking to set up remote access to a NAS unit locally sharing ...
1
vote
2answers
121 views

Is VPN the best solution against man-in-the-middle attack? [closed]

I'm looking for the best way to protect my enterprise against man in the middle attacks, because a lot of people connect to the same network. So I was thinking of creating a VPN. Is this really the ...
7
votes
2answers
425 views

What does a Firewall mean by “connect to TCP port without your permission”?

McAfee is reporting incoming network connections blocked from IPs like 198.252.206.149 (StackExchange Inc.), 54.179.231.116 (Amazon Technologies Inc.), 74.125.68.106 (Google Inc.), etc. The ports ...