Network Security - securing network infrastructure and connections
1
vote
0answers
74 views
Automatic router admin password change [closed]
I feel that this is definitely a hack of some sort and an interesting one.
I am using a Beetel 450TC1 ADSL2+ modem router and here is what I face:
* First, I disconnect the telephone line from the ...
-1
votes
1answer
82 views
What service could penetrate my Firewall via UDP on Port 17275?
Has anyone monitored various requests from all over the world on Port 17275 via UDP?
My firewall logs show huge amounts of such requests from lots of different IP Adresses.
I can't find any ...
5
votes
3answers
2k views
How do I ensure data encryption on Samba transmission on *NIX systems?
I have a heterogeneous system (both MS and *nix) that communicates with CIFS/SMB. How can I ensure proper data encryption at the application layer?
1
vote
1answer
142 views
Using a Web Server to steal NTLM credentials
I am trying to design an attack vector against an organization in which the pen tester (myself), steals NTLM credentials through HTTP. I am thinking of these scenarios:
1- I set up a web server on my ...
4
votes
6answers
6k views
If someone hacks my wi-fi connnection, what can they see and how?
I have two questions on wifi security:
If someone knows my wifi password (be it WEP or WPA) what can they
see on my screen? Do they just see URLs I visit, or can they see
everything in my ...
6
votes
3answers
195 views
TCP Sequence Prediction and it's prominence in modern systems/networks
I have a question regarding your experience of TCP Sequence Prediction that I am hoping someone could help with.
I am aware of how TCP Sequence Prediction works and how the connection can be hijacked ...
1
vote
1answer
144 views
Can accounts still be logged onto if Password Caching is not enabled?
This is kind of an extension of my other question.. If you were not storing any of the passwords locally (caching disabled), would a user some how still be able to circumvent around this security ...
1
vote
3answers
147 views
How to encrypt packets in network?
I have a simple wireless router to share the internet with single access username/password.
I was wondering if it is possible somehow to set packet encryption so that other people on the LAN cannot ...
19
votes
5answers
9k views
Is it still unsafe to email credit card number nowadays?
We all know not to do it, but someone emailed my credit card number and cvv code to my gmail.
I'm wondering if the risk is so low I don't have to call to cancel my card.
The email is sent from a ...
3
votes
3answers
157 views
(Windows) Is it possible to catch a virus on my LAN without clicking on anything?
Scenario:
My unpatched PC is connected to a network which contains other "infected" computers, can I get infected by viruses without any interaction on my part?
Many Thanks
-4
votes
1answer
191 views
DoSing my Home Network with only a Public IP address [closed]
+--------------------------------------------------------+
| Client Host Name |.. IP Address ..|.... MAC Address ...|
| Desktop-Home ....| 192.168.1.100 | 00:19:D1:EA:03:68 |
| GT-S5380K ...
13
votes
7answers
1k views
DDoS - Impossible to stop?
Is it possible - in theory - to stop1 a DDoS attack of any size? Many people claim it's impossible to stop DDoS attacks and tell me I just shouldn't mess with the wrong people on the internet.
But ...
-2
votes
1answer
79 views
Why should I use the VPN? [closed]
Does a Virtual Private Network (VPN) provide an encrypted connection from outside networks or from ISPs to the internal network?
3
votes
1answer
144 views
Is it possible that my home router is preventing my ARP poisoning attack?
As part of a school project I am trying to do a MITM attack on my local network using ARP poisoning. I choose a target and then I send a spoofed ARP packet to it and to the router every 100 ...
70
votes
7answers
4k views
How can I protect my internet-connected devices from discovery by Shodan?
There's been a lot of buzz around this recent CNN article about Shodan, a search engine that can find and allow access to unsecured internet-connected devices.
Shodan runs 24/7 and collects ...
0
votes
3answers
207 views
How to hide local network traffic on my computer?
I want to hide any traffic an application makes on the local network, make it look like the network is completely quiet to the system and other monitoring software.
Is this doable? How would I ...
13
votes
5answers
9k views
DHCP vs. Static IP Addressing
How do DHCP and Static IP addressing compare, from a security standpoint? What are the risks/benefits associated with each?
I know the preferred solution between the two will vary with network size ...
1
vote
3answers
533 views
Sniffing on VPN configuration
Our company wants to implement a service based on sniffing for security purposes, since we manage important information this requirement is imperative. The situation is as follows.
Everyone in the ...
3
votes
1answer
235 views
Are Kismet (on OpenWRT) and Snort IDS (on a linux server) compatitble?
I'm trying to develop an IDS/IPS system project to include these elements:
A router running OpenWRT running Kismet drone (Attitude Adjustment 12.09rc1)
A Linux server (Running Kismet server + client)
...
2
votes
2answers
140 views
Prevent unauthorized workstations from joining a Windows Domain
Corporate policy only allows users to connect corporate-issued machines to the network managed by Active Directory. Is there some means to log or otherwise detect when the same user account joins the ...
5
votes
2answers
143 views
Need a software that can monitor and log network traffic of installed applications
I need to monitor and log network activities of a specific software installed on my system.
I know there are lots of network monitoring software out there, even system explorer has one built in.
I ...
2
votes
1answer
55 views
find hardware and OS specs on routers
How do you determine the model and IOS version of a Cisco router, if you have its IP address remotely, but have no physical access. For example, I run nmap -sP and can see the router's IP, but all ...
2
votes
1answer
100 views
What are the vulnerabilities of VOIP-specific security protocols?
Existing relevant questions:
How do you Secure VOIP in a large organization
What are the main issues and best practice security controls when exposing SIP and H.323 to the Internet?
Do secure phone ...
5
votes
3answers
486 views
Security measures for a WiFi access point?
I am planning to purchase a program that comes with an App that allows you to control the program via phone. The developer told me that the connection will be done via an extra WIFI box connecting to ...
2
votes
1answer
85 views
How do I diagnose client-side SSL errors?
Often on my home network I get random SSL certificate errors when I visit certain well-known sites. Today it was a Google SSL error, where Google apparently tried to identify itself as *.icloud.com. ...
2
votes
2answers
100 views
Does “loose source and record route” drop the source address?
Is the source IPv4 address lost when a person uses "loose source and record route" and the destination address is put before the end of the list of addresses through which routing should occur?
It ...
3
votes
1answer
75 views
Suggestions for secure fax SaaS
Does anyone have experience with any fax cloud services, which they can recommend from a security standpoint?
12
votes
1answer
390 views
Why on earth would anyone use the 'top secret' option of IPv4?
So, I was reading RFC 791, and got to the bit about options (here). Everything seemed to be decent and sensible, until I got to the 'levels of security' part.
Now, I can understand how, internally, ...
6
votes
4answers
311 views
Has my network/computer been breached?
I'm not sure if this is the right site to ask, so I apologise if it isn't, but here goes.
A while ago I started noticing some odd behaviour. My Gmail account was compromised, it seemed, and I had to ...
2
votes
5answers
194 views
How to bypass Nmap blockage?
I rent a server, and my provider seems to be blocking nmap. Is there any other tools I could use to test my home network from the outside?
Also, does blocking nmap on a network provide any security?
...
2
votes
2answers
178 views
do different subnet masks on home network provide any security?
So I have two routers on my home network: one is provided by my ISP, and the other is my private router.
Router A- ISP router: 192.168.1.x
router B- private router: 192.168.2.x
Clients on my ...
1
vote
2answers
103 views
Intrusion Prevention Systems: NIPS vs NBA
I was going through the wikipedia article on Intrusion Prevention Systems.
It states two of the four types of IPS as follows:
Network-based intrusion prevention system (NIPS): monitors the entire ...
11
votes
3answers
1k views
How are mobile telephony networks like LTE and HSPA encrypted?
How are mobile telephony networks like LTE (4G) and HSPA (3G) encrypted? between what parts is the communication encrypted? who has access to the keys? is symmetric or asymmetric encryption used? is ...
3
votes
3answers
241 views
How will IPv6 affect DDoS mitigation techniques?
IPv6 introduces a much larger address space than IPv4 and with it there are many new techniques in creating and mitigating DDoS attacks. What are some examples of risks and mitigations?
For example, ...
4
votes
1answer
788 views
Physical machines not detected from a Backtrack VM
Some time back I asked about using metasploit on a virtual machine here. This question is a kind of 'part 2' of it.
My test bed set up consists of 3 physical machines: A, B and C. Each of them have ...
3
votes
2answers
219 views
Why does layer 2 IDS seem underdeveloped compared to layer 3 IDS, for wireless network?
I understand that there are many applications such as Snort that do the job for network layer 3 IDS.
From what I have researched, layer 2 wireless IDS seems like a field that is very slow in ...
1
vote
1answer
136 views
Exchange of DEK and KEK (encryption keys) between app server and key server
In my application, it is required to encrypt a user's data before inserting it into the mysql database. I am using AES algorithm to encrypt the data using a 256 bit hash (and is calling it Data ...
31
votes
6answers
6k views
What techniques do advanced firewalls use to protect againt DoS/DDoS?
It is hard to protect a server against Denial of Service attacks, DoS/DDoS. The two simple ways I can think of is to use a server with much resources (e.g. CPU and memory), and to build the server ...
0
votes
1answer
378 views
How to track down an IP spoofer?
We just installed a SonicWALL NSA 3500 and I've noticed a few times per day there will be an alert entry like this:
Time: 01/02/2013 9:00:41.000
Priority: Alert
Category: Intrusion Prevention
...
-1
votes
1answer
125 views
Can File Sharing being Controlled by Mac Address? [closed]
I am currently setting up secure environment between 2 pc in isolated network.
Just wondering can we do file sharing based on that pc mac address instead of username?
The environment is OEM Windows ...
1
vote
1answer
156 views
Tor traffic seems to be exiting from different Tor exit nodes - is that expected?
I seem to be observing some odd behaviour whilst experimenting with TOR. It's entirely possible this is just my own ignorance as well, in which case I would appreciate some ...
5
votes
1answer
253 views
Setting up home lab with Snort and Vyatta - looking for resource recommendations or advice
I'm looking to turn a new desktop (Ubuntu 12.10-64bit) I built into a virtual home lab for testing and experimenting with various security things. The first setup I would like to try running is the ...
11
votes
6answers
2k views
Why is ARP poisoning killing all network activity?
Using ettercap and ARP poisoning, I was able to eavesdrop on other connections, but suddenly I was unable to make any connection to the Internet. To restore Internet connectivity, I had to restart my ...
2
votes
2answers
243 views
What compliance framework is appropriate for firewalls
As a more corpose vulnerability assessment and penetration test, one step of our activity is to review from a security perspective the policy of some firewall.
In our society we have a deep ...
12
votes
5answers
5k views
Security risk of PING?
I have been told that PING presents a security risk, and it's a good idea to disable/block it on production web servers. Some research tells me that there are indeed security risks. Is it common ...
5
votes
2answers
205 views
How did Evernote detect the security breach?
http://blog.evernote.com/blog/2013/03/02/security-notice-service-wide-password-reset/
Evernote's official message says little about technical details of the attack and how it was detected.
...
2
votes
1answer
159 views
Tacacs+ scenario: can I permit user to configure only for one interface and deny others
I'm currently deploying TACACS+ with a Cisco device, I use a TACACS server from here: http://www.shrubbery.net/tac_plus/
My scenario is: I want to permit a user to configure my router but only for a ...
6
votes
2answers
208 views
Segmenting Virtual Network Traffic
I have a basic to moderate understanding of VLAN's and their pros and cons as they relate to network segmentation but I'm wondering where to start as one moves into virtualized environments.
From a ...
10
votes
4answers
4k views
How are spoofed packets detected?
My assumption:
When a firewall is configured to drop spoofed packets, it tries to ping (not necessarily ICMP) the source IP and sees if it belongs to a real host or if it's up, and if not, it drops ...
0
votes
4answers
163 views
How does one go about network forensics investigation with no prior knowledge?
I am being asked to perform a forensics investigation on a network.
The reason being that for the past few months strange things are happening on the network. VLANs are being deleted, configuration ...
