Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

3
votes
1answer
33 views

Would a DMZ be safe to use with a software firewall for home networking?

If I set up a Windows 10 PC with a software firewall (TinyWall, which is a front end for Windows Firewall) and blocked all traffic except for a few applications and ports I would be using (Minecraft ...
4
votes
1answer
366 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
4
votes
1answer
131 views

What about Long Router Passwords and WPS Push-Buttons

I have a question related to the WPS push-button capability on my router. I know that there is some material on the web about this question, but I haven't found anything that's current enough for my ...
0
votes
1answer
34 views

How is UDP hijacking even possible?

My doubt is this: UDP has no sequence numbers, so what indeed is the concept behind UDP session hijacking?
25
votes
5answers
5k views

Advantages to killing sessions after 5 minutes?

I'm dealing with a server that isn't mine to configure. Something somewhere between me and this server kills any connection after 5 minutes if no traffic passes between the two machines. This includes ...
0
votes
0answers
18 views

Why is Fragmentaion done on layer 3 (Network layer) [migrated]

Why is fragmentation done on network layer and why not on other layers ? Fragmentation means splitting the packet into to small pieces and sent from source to destination. The maximum MTU size is ...
1
vote
0answers
53 views

Unknown MAC in network

A few days ago, I noticed an unknown MAC address in the statistics page of my home router. The OUI lookup yields Cisco as manufacturer. However, I don't have such a device in my network -- actually, I ...
-1
votes
2answers
28 views

RBAC togehter with AAA?

I'm taking a network course and my teacher has not been answering my emails. I'm supposed to set up "Role based access using privileges with AAA" I thought RBAC and AAA stood in contrast to one and ...
2
votes
1answer
86 views
+50

Authenticate tracking device with TCP server

I am building a tracking device and am looking for a secure authentication method to use when the device wants to establish a connection to the server. The server is a TCP server that we open a ...
-1
votes
1answer
45 views

Hardening switch vs router [on hold]

I'm currently working on a newtwork project and it is time to harden the network devices. I made some searches for googling switches and routers, but basically the same results keep popping up. Is ...
25
votes
3answers
3k views

Does using a live CD make you more vulnerable to remote attacks?

Some people recommend the use of a Linux live CD for online banking, but doesn't that make you more vulnerable to network attacks since it's not updated? I tried installing updates and it required me ...
0
votes
0answers
7 views

Link Layer, E2EE encryption [on hold]

Do you know how I can find out more about link layer and E2EE encryption also with related topics. I hove more network books in my library but I could not find any topics about OSI encryption, in ...
4
votes
1answer
921 views

Snort even though working properly does not report majority of rules

I have installed Snort 2.9.7.0 and it does not detect majority of attacks, such as nmap port scans, downloading exe files, opening documents containing keyword "root". I use Snort together with ...
-5
votes
3answers
11k views

How to hide my ip and browsing history from others on my network? [duplicate]

I need to hide my activity and IP address from those I share this network with. I'm unsure if a VPN will serve my needs, because I'm not concerned about the sites I access tracking me. I'm concerned ...
8
votes
4answers
8k views

How to detect hosts running in virtual machines with nmap?

I have to determine if a given subnet has virtual hosts. Are there any ideas about what switches to use?
6
votes
4answers
3k views

Security provided through MAC filtering: Wired vs. Wireless Networks

My question refers to the following article on Wikipedia: MAC Filtering. The article states: MAC filtering is not effective control in wireless network as attackers can eavesdrop on wireless ...
0
votes
0answers
29 views

Mac OS 10.9.5: Accidentally Safe Booted while connected to network with other Macs on it - what's the risk? [closed]

Title says it all. For some reason my Mac did a "safe boot" instead of a regular boot. Someone else (with a poor history of being able to protect computers from crapware) on the same LAN was also ...
0
votes
2answers
126 views

What can I do about being heavily port scanned?

I have two devices connected wirelessly to my Linksys router while running Symantec Endpoint Protection on my computer. A few days ago I started using the internet by connecting the cable directly to ...
1
vote
0answers
45 views

I am hoping someone can shed some light on these nmap scan results

I am concerned that a friends computer may be compromised. They were complaining about the computer getting really hot, difficulty maintaining an online connection, finding unread non junk emails in ...
1
vote
2answers
243 views

How to route all traffic through TOR?

I have TOR setup on my macbook and I configured my wifi connection to use TOR's SOCKS Proxy that is running on port 9050. When I check my connection it confirms I am browsing through TOR. However, ...
0
votes
1answer
40 views

How to find a spoofed packet with matching TTL?

To detect spoofed packets, TTL is recorded and it if does not match, its declared spoofed. Is there any technique to find an IP address whose TTL to the target is same as your TTL to the target ? I ...
1
vote
0answers
11 views

Why is the maximum port range 65535 in the TCP/IP Suite ? [migrated]

My doubt is that - a port is just logical, so why such restriction ? Why can't I have a port of 9924593 or something like that ?
94
votes
14answers
27k views

How can mom monitor my internet history from a distance?

This might sound like a funny question from a twelve-year-old. The less funny part is that I am 21 and currently studying at university (I don't live at University, although I am 15 minutes away. I do ...
-3
votes
0answers
98 views

How to kill a Wi-Fi network? [closed]

There is a Wi-Fi network I'd like to kill, i.e. to make it disapear from the list of availables Wi-Fi networks -- or at least put it at the bottom with a low signal. I've tried to use some tools from ...
0
votes
0answers
18 views

PostScript/Jet Direct port TCP 9100 mandatory for printers?

I'm trying to acquire more knowledge on the topic in order to find and fix a few security issues on printer infrastructures to prevent misuse, pranks and secure all data in it. Currently I have a few ...
-4
votes
2answers
46 views

What are all the IT security concerns of a small business? [closed]

We are in the process of updating our IT infrastructure and part of this will be a security review. I want to make sure we review every relevant security point. So, what are all the IT security ...
3
votes
4answers
159 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
0
votes
0answers
7 views

Few questions about MAC addresses and related material [migrated]

I have a few questions, but all under the same umbrella topic. If I find out a MAC address of a machine on a LAN, and I spoof my MAC to match that particular machine and join their LAN, how will ...
0
votes
6answers
114 views

Does MAC address filtering provide security? [duplicate]

Sometimes I need to configure the router and choose which devices can connect to my network (MAC address filtering). For example, limit connections to 3 specific machines. But for an advanced user, it ...
0
votes
1answer
69 views

What's Google Inbox request/response obfuscation skill? [closed]

I Inspected Google Inbox network resources via Chrome Developer Tool. I saw some request/response payload and result. This object type is not readable for human. I've never seen this kind of ...
15
votes
8answers
10k views

Why is ARP poisoning killing all network activity?

Using ettercap and ARP poisoning, I was able to eavesdrop on other connections, but suddenly I was unable to make any connection to the Internet. To restore Internet connectivity, I had to restart my ...
1
vote
1answer
608 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
1
vote
1answer
156 views

I have internet at home, need to know who visited what? Possible? [closed]

I have internet at home. I wanted to keep a watch on who visited what without putting a computer on for 24 hours and running some proxy software on it. Is there a possibility to get a track of all the ...
1
vote
4answers
93 views

How can I mitigate the risk of my wifi key being shared with strangers through apps?

Sometimes a guest asks for my wifi password, and I gladly give it to them. Sometimes that guest has a wifi sharing app, and said app shares the key with totally random strangers (I know there is some ...
3
votes
1answer
4k views

Zeus botnet source code

I am doing my project on botnets and wanted to understand the source code of the Zeus botnet. Where is the right place to get started with some analysis of zeus botnet source code? I need a good ...
0
votes
1answer
34 views

Encrypted traffic analysis

If i tunnel any tcp traffic true ssh or any ssl encrypted protocol will some one capturing the traffic capable of do some kind of offline decrypting using the capture file ?? What technic they use to ...
2
votes
1answer
61 views

Securely sending packets without them being spoofed

I'm working on a simple multiplayer game to break the ice with network programming. I have a system where if the player moves, the server receives a move packet that contains some stuff like the ...
1
vote
3answers
3k views

Can a network admin see my computer's screen if I'm logged into their wifi network?

I had a friend try to convince me today that simply by signing into a wifi network, without any physical access to your computer, the network admin can see your computer's screen. Obviously this is ...
3
votes
1answer
201 views

Can the windows Remote Procedure Call subsystem be modified from the default without causing Windows 8/8.1/10 to break?

This is a question that personally as a security professional has bugged me for a long time. So, a default Windows installation, from XP up to 10, typically has a few services listening on the ...
9
votes
6answers
15k views

How to detect eavesdropping by your ISP

I've noticed some funny behavior lately with my home Internet connection such as connections dropping frequently, rate limiting occuring, and packet loss. I know how to get around this online, use a ...
2
votes
2answers
113 views

Is a router without inbound firewall a security issue across the internet?

Imagine this scenario: Alice has a private subnet (192.168.1.0/24) connected to a router which is also connected to local network B. Alice's router performs NAT (only using MASQUERADE; outbound ...
-1
votes
2answers
88 views

Determining Firewall settings (Ports, etc) for specific applications

How can we identify the network or network firewall requirements for a Desktop or Web application. Meaning what ports are required by the applications. How the Cloud and non Cloud networks communicate ...
-2
votes
1answer
76 views

Clicking a lot of website links in Google Maps, then sent through multiple URL redirects, and lastly to a page that made my laptop start beeping?

I was in Google maps clicking on all the website links listed in the side panel, looking at every website really fast. Note, they were all tattoo parlors. One of the links I clicked bounced me through ...
-4
votes
1answer
111 views

whats with Chinese and Russian proxy servers?

I keep hearing that if you commit some network activity via Chinese or Russian proxy servers you are very difficult to be tracked down. What is the reason for this other than lack of international ...
9
votes
4answers
1k views

How to determine if a VPN provider respects data confidentiality?

I've read about why I really should use a VPN and I've been looking into different providers, but there's one thing I'm worried about. Can't a VPN provider just look at my traffic all they want and ...
1
vote
1answer
77 views

Arp spoofing blocks internet [duplicate]

I work on a fresh Kali install running in a VM. I have an external Wi-Fi NIC used only by the VM (I try to not use the internet connection of the host). The network is protected (hum) by WEP, with ...
1
vote
0answers
18 views

Azure Networking VPN

Company is exploring the option of connecting Azure VNET to the on premise network using either Site-to-Site or ExpressRoute. There are concerns regarding potential vulnerability of internal resources ...
0
votes
0answers
6 views

Change local IP address programmatically? [migrated]

I have a local network in my home with my ADSL(Router) modem. We can change our IP with the following setting in Windows Is it possible do it programmatically, e.g. using C#.Net?
3
votes
1answer
528 views

How secure is WiFi roaming if clients connect automatically to access points with the same SSID and security?

After reading a bit about WiFi roaming where multiple access points are set up with the same SSID and WPA/WPA2 shared key, I'm wondering how secure the concept of WiFi roaming is. If clients connect ...
1
vote
1answer
80 views

How does a malicious user connect to a private network?

I have followed these instructions for setting up a couple of servers to have private networking. It ends by saying "It is important to secure your private networking interface the same way you would ...