Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
0answers
28 views

How do I allow for anonymous encryption?

I have a protocol I am designing that requires anonymity and privacy. My idea is to have a minimum number of hops in the network before the message can be sent to its intended destination. The ...
1
vote
0answers
31 views

A local IP address (RFC 1918) on my network that is not … local ..

I've noticed an IP address today on my network (192.168.15.1) which when visited actually goes to a page that has a router webconfig page (Not my router) The puzzling thing is that i tried traceroute ...
2
votes
1answer
98 views

How to sniff [possibly encrypted] TDS protocol data from the host the client application is installed on?

Let's say, there is an .NET application on a windows 7 host where I have administrator's access rights. The application works with remote MS-SQL server which I don't control, it also seems that the ...
4
votes
1answer
100 views

Accessing user accounts without asking for their password

I don't like asking my (windows network) users for their passwords, it doesn't seem like a good security practice. I also want to train my users to never give their password to anyone if they ask for ...
1
vote
1answer
47 views

Updating privacy/security-concerned applications

Lets say we have a decentralized open source p2p chat client meant for secure communication. The main attack vector seems to be the (centralized) update mechanism. What methods and/or techniques can ...
6
votes
2answers
393 views

What does a Firewall mean by “connect to TCP port without your permission”?

McAfee is reporting incoming network connections blocked from IPs like 198.252.206.149 (StackExchange Inc.), 54.179.231.116 (Amazon Technologies Inc.), 74.125.68.106 (Google Inc.), etc. The ports ...
-5
votes
0answers
43 views

Information Security on a network [on hold]

You are an IT Security administrator in a banking organization. Your organization hired an outside IT firm to do a proof of Concept for new equipment which is a computer based system. This equipment ...
-6
votes
0answers
52 views

What's the best way to connect to a computer via IP address? [on hold]

I'd like to know a valid,working method which allows me to connect to any computers if I know their IP address.
1
vote
1answer
26 views

Security issues with multiple interfaces

Say I have a server with multiple interfaces. I wish to configure each interface as different IP addresses (and host name). Is it advisable, on a security standpoint, to do that? I have an application ...
-2
votes
0answers
38 views

Most secure router to buy for my home? [on hold]

I want to buy a new router for my home, because mine is given by my ISP and i'm sure it's a security shame. What I need is a router that possibly can run a custom or, lets say, open firmware, so I get ...
0
votes
1answer
45 views

Socket timeouts and DDOS [on hold]

I have a question about socket timeouts in TCP. If by doing a certain request to a server a client's socket is timed-out, can there be a security vulnerability ? Is a timeout synonymous to the ...
4
votes
1answer
54 views

Security risk: Digitally sign communications for SMB

I have a computer (Windows) on a network where an industrial process is controlled. There is an option in Local Security Policy >> Local Policies >> Security Options >> "Microsoft network client: ...
0
votes
0answers
60 views

Information Security classification [on hold]

I've been interested in IT security for a bit (~1 year) and had a bit of experience with NSM as well as web security. I want to have an overview of the entire industry, with all relevant niches and ...
1
vote
0answers
31 views

Snort alerts analysis (web interface) [on hold]

I have a question about Snort (or maybe any other IDS/IPS, any working solutions would be ok). The goal is to set up some web interface providing a way to view the whole TCP stream packets of each ...
113
votes
8answers
12k views

Are “man in the middle” attacks extremely rare?

In "Some thoughts on the iPhone contact list controversy and app security", cdixon blog Chris Dixon makes a statement about web security Many commentators have suggested that a primary security ...
2
votes
0answers
24 views

How to check SSL connectivity between certificates installed on two different server [migrated]

Suppose there are two organizations which share information with each other. Every organization installs SSL certificate in their application server and provides the same certificate to other ...
-2
votes
1answer
55 views

Stuxnet - The background functions [closed]

Stuxnet was a clever worm that aimed to malfunction programmable logic controllers on nuclear networks (Iran was the most affected). Nuclear networks were private networks, not supported on Internet ...
1
vote
1answer
48 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...
0
votes
0answers
11 views

Does NDP (Neighbor Discovery Protocol) reduce ARP (Address Resolution Protocol) attacks?

I read the comparison of NDP with ARP but am uncertain if NDP does reduce any amounts of ARP attacks, given that with NDP, ARP is not used for address resolution. For the discussion to be specific, ...
1
vote
1answer
134 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
-5
votes
0answers
35 views

Moving through the network [closed]

I want to keep it short. Windows had made it "Out of the box" and your are safe . I mean to say we don't need a OS hardening (for the general small office and home users). When a single machine is ...
1
vote
1answer
105 views

Is using Chromecast “a security nightmare”?

I'd like to use Chromecast on our office network. Doing so requires enabling UPnP (Universal Plug and Play). A quick search turns up statements like this: The US Department of Homeland Security ...
-2
votes
0answers
15 views

How to assign my machine static IP of a different VLAN [migrated]

Imagine a user is on VLAN1 that dynamically gets an IP, and there is a VLAN2 that the users on VLAN1 cannot access. Is there a way to assign the machine of user on VLAN1 an static IP in the range of ...
1
vote
0answers
42 views

ARP poisoning question

I'm writing a program that detects ARP poiosoning. My question is: How can I b sure my LAN hasn't been poisoned? Yes, I can use my settings and find the IP address of the default gateway and yes I ...
0
votes
1answer
152 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
0
votes
0answers
19 views

Storing LVM encryption key on network share [migrated]

I want to encrypt all my LVM LV's and have them automatically unlocked on boot using a keyfile available on my network. I can make the files available by SMB, NFS, HTTPS, etc. I have Ubuntu Server ...
2
votes
1answer
126 views

TLS 1.3 Makes Security Tools Obsolete?

I am a student and relative noob in IT security performing research for three reasons: school, my employer and personal curiosity, and I hoped maybe someone could answer a question for me. In a video ...
-2
votes
1answer
72 views

How do bits transefer over wire? [closed]

i was tackling with networking and cannot seem to understand How bits are transferred over wires in the first place what counts for each of 0's & 1's
0
votes
1answer
42 views

Setting up a secure Ad-Hoc network

I am taking my laptop with me on a school bus trip, and I want to use an Ad-Hoc network to host a multiplayer Minecraft server. I have heard, however, that Ad-Hoc networks have a vulnerability that ...
1
vote
1answer
30 views

Belkin wifi netcam cloud storage [closed]

If my net/router turns off with the belkin netcam will i still receive video if the motion sensor is activated? I was considering purchasing one, but if all that needs to be done is simply turning off ...
2
votes
0answers
127 views

Is my server being used as a proxy or being attacked?

I have an Ubuntu, Apache, Passenger, and Rails 4 project on AWS EC2. I am a beginner full stack developer and am unfamiliar with the security and server side of my project. Recently, my site was ...
0
votes
2answers
72 views

Inspecting every packet leaving the system for sensitive information ? [closed]

Is there a way to check every packet leaving the system for sensitive data like IP addresses, personal information (like logins) etc ? A free (and preferably open source) program which does this for ...
-4
votes
1answer
27 views

What is the most secure way to protect a custom CMS from infiltration? [closed]

I have a custom CMS with a randomly generated ASCII 100-character string from this site for both my username/password. I also have this following sha512 encryption system, which was created by ...
2
votes
1answer
51 views

Ideas on how I can fragment captured network traffic?

I am trying to create a lab environment where I can analyze common IDS solutions (starting with Snort specifically) and their ability to reassemble fragmented IP trains. I have a collection of ...
1
vote
0answers
23 views

Is a direct SIP video call (encrypted) between two computers more secure than going through a registrar service?

I learned recently about ZRTP-encrypted video calls using an SIP client, such as Jitsi or Linphone or Blink. I was able to make a direct encrypted video call between two clients on the same local ...
1
vote
3answers
339 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
1
vote
1answer
85 views

Snort even though working properly does not report majority of rules

I have installed Snort 2.9.7.0 and it does not detect majority of attacks, such as nmap port scans, downloading exe files, opening documents containing keyword "root". I use Snort together with ...
1
vote
1answer
42 views

Secure point to point remote access to NAS drive

This question is very similar but also distinctly different (How do I ensure data encryption on Samba transmission on *NIX systems?) I'm looking to set up remote access to a NAS unit locally sharing ...
4
votes
4answers
37k views

IP address of an iPhone

Recently I logged on to my bank account via the Chase app on my iPhone. I received a message that another device was currently logged on to my account and "would I like to end the session"? Of course, ...
1
vote
2answers
112 views

Is VPN the best solution against man-in-the-middle attack? [closed]

I'm looking for the best way to protect my enterprise against man in the middle attacks, because a lot of people connect to the same network. So I was thinking of creating a VPN. Is this really the ...
2
votes
1answer
123 views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
1
vote
1answer
364 views

OpenVPN and firewall configuration in LuCI

I'm trying to find the best (most secure) configuration for the firewall in OpenWRT. I'm using LuCi to configure all the stuff. I have successfully created a VPN (OpenVPN). It is supposed the best ...
2
votes
1answer
309 views

802.11 Authentication/Association and WPA/WPA2 authentication (Four-way handshake)

So I have read that 802.11 standard requires stations and APs to go through the authentication and association before communication can take place. I also know that WPA/WPA2 has its own authentication ...
0
votes
1answer
66 views

Does VPN remote port forwarding compromise the anonymity of the VPN user?

An anonymous VPN service will typically assign the same public IP address to many VPN users. This procedure ensures that a connection cannot be traced back to the VPN subscriber: behind the veil of ...
2
votes
0answers
36 views

How to design a right VPN connection for an organisation (Interconnected MPLS link or Individual FW)

Thanks in advance for your advice We have to implement VPN connection for nearly 7 countries Option 1 : As we have private MPLS link to all 7 countries. It is been outsourced Third party. They ...
11
votes
4answers
3k views

How to prevent network administrators from accessing USB drive

How can I prevent network administrators from accessing, mapping to etc. a USB drive that's in a PC on their network? I'm mainly concerned about files being edited or deleted.
-1
votes
0answers
9 views

Know username who is working on remote desktop [migrated]

We are a team of 20 people we have a machine that is used by everyone. We take remote desktop of that machine to work on. so if somebody is working and i want to take that i have to ask everyone in ...
-1
votes
0answers
71 views

How can I tell if someone is intercepting my cell phone signal using mobile signal tracking software?

I've been having many issues with my cellphone such as bad signal, dropped calls, spoofing, jamming, battery temperature over 115℉, can't make calls, not receiving or being received calls, and more. ...
8
votes
3answers
10k views

How can I keep a roommate from seeing my web activity?

I have a roommate who is a network security engineer and I think he hacked our home network and now knows what sites I am visiting and what I am doing online. Although he is not stealing anything I ...
1
vote
1answer
196 views

secure use of psexec?

As of March 7, 2014 PsExec now "encrypts all communication between local and remote systems, including the transmission of command information such as the user name and password under which the remote ...