Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

2
votes
4answers
198 views

How could online encryption ever work? [duplicate]

I have recently read about the german enigma machine in WW2, It worked in a way that every day the machine configuration was sent per mail to the different operators. (I couldn't find official sources ...
2
votes
2answers
39 views

Why do ALGs restrict traffic on a given TCP port based on the protocol?

My understanding is that application level gateways restrict the traffic they proxy based on port and protocol - say HTTP over port 80 or MQTT over port 1883. Both types of traffic are using TCP as ...
9
votes
4answers
373 views

How to design a home network for IoT devices?

I'm trying to work out how best to design a home network which contains (potentially hostile) devices. I'm running into my limits of networking knowledge! I have two challenges. Unsecure Devices ...
1
vote
1answer
115 views

How to pick an enterprise VPN provider?

We have always deployed our own VPN using an open source package, but as our company is growing we've become increasingly aware of the importance of scaling this solution, especially now we operate ...
0
votes
0answers
61 views

From a topological point of view, are there any network structures which weaken a DDoS attack?

I am aware that I am doing some abstractions here (link-layer-3/link-layer-2 and router topology comparison, for instance). However, I wonder if there are any network structures (so-called graphlets/...
0
votes
2answers
90 views

Wipe out or dissapear and start over again in internet for personal security? [duplicate]

The other I was talking with a work mate that is part of finances and He made a question that I couldn't answer at the moment. "I have a lot of accounts and information about me internet. I'm really ...
1
vote
1answer
29 views

Network authentication using router firmware scripting [closed]

To connect to internet in our institute, you need to login with your credentials on a page and then approve the IP address for proxy less usage. On a router, if one device authenticates, all the other ...
3
votes
4answers
166 views

How can a network be secured against attacks coming from the inside?

(updated to (hopefully) be less broad) No matter how well one secures a network there's always the chance of an attacker gaining access. In a shared home + home office network (eg. for a remote ...
0
votes
2answers
111 views

How to capture Wifi 802.11 traffic?

I want to capture the wifi traffic from my wireless card, so what i have to do and are there tools for that? I know that there is aircrack-ng and airodump, but these tools need a extra wireless ...
3
votes
1answer
55 views

One of my open files turned into a list of URLs and codes after clicking a link on a phishing email?

So I received a non-filtered email earlier today supposedly from Itunes under my email address with an invoice for Netflix subscription. Some of the links were genuine, but ultimately I clicked on a ...
0
votes
1answer
94 views

How can an attacker eavesdrop on users in public WIFI?

I want know why it's said that public WIFI is not safe for banking transactions or entering password for online accounts etc. I want to imitate an attacker and try to harvest as much information as I ...
7
votes
1answer
135 views

How to spare file server data from being held hostage by client ransomware?

Suppose in a network there is a file server which's storage is shared between all workstations and all users require full read/write access to this storage for their cooperation workflow. (Over samba, ...
1
vote
2answers
129 views

Sniff network packets that don't talk to my computer?

How would one sniff wireless network packets that do not pass directly through my computer- without access the the AP or router? I want to be able to sniff for network traffic (even while ...
3
votes
2answers
55 views

Is ignoring share permissions ok?

For my small home network I've found that it is easiest to setup network shares with share permissions set to Everyone: Full Control share permission and then configure the NTFS permissions according ...
2
votes
1answer
83 views

How can I test a domain that I don't own for unencrypted communication vulnerabilities?

I am suspecting a website of passing clear text login information and so far as I can tell the connection is unencrypted. Are there web-based tools to validate/test a website for basic security ...
2
votes
0answers
58 views

Rogue Containment on a wired network (mostly)

I work as a security analyst for a large company. The answer must provide remote support. We are currently looking to build a piece of software (integrating existing products with home grown ...
4
votes
3answers
187 views

Why is it dangerous to let an internal server talk to the internet (to a specific IP)?

Sort of a basic question, but if we have an internal server and want it to talk externally, for example to get new packages. This environment normally does not have access to the internet. I've heard ...
2
votes
3answers
137 views

Which are the most important RFCs when learning security? [closed]

I was reading some security related blogs and write ups in internet and I started going for the RFCs instead, but they are huge, therefore impossible to learn all of them. I see those below as very ...
1
vote
1answer
92 views

MITM attack on WPA-PSK using fake AP: Can the password be intercepted from normal Windows AP-logon mechanism?

I have already tested how to do a MITM attack, using a fake AP to intercept the WPA-PSK, by presenting the user to a vendor (e.g. Linksys) logon page, before routing network traffic through eth0. ...
1
vote
1answer
47 views

Retrieving malware report information from malware network

I'm getting ready to stand up an isolated malware network at the place I work for performing analysis tasks and it will have a suite of reverse-engineering and analysis tools on it. For obvious ...
4
votes
2answers
211 views

What information could be identified about a Virtual Machine which routed traffic via a VPN?

Background: I have a Virtual Machine which is running all it's traffic through a VPN (from within the Virtual Machine) so to obfuscate all web traffic. This Virtual Machine is running from within an ...
5
votes
1answer
121 views

Anonymity while “attacking” a target [closed]

I'm very interested to the security topic, but sometimes I fail in understanding how a hacker would be successful like for example a group that recently claimed they got data from FBI. I wonder ...
0
votes
0answers
23 views

Windows : security of USBNET / RNDIS

I'm having trouble finding documentation about how to setup any security for RNDIS or if the system is already secure enough. For those who doesn't know RNDIS is a protocol that permits a USB ...
0
votes
1answer
188 views

Android devices are unable to connect to Rogue Acces point created using Airbase-ng

I have created a rogue access point using airbase-ng, but I can't connect to it using my android phones (note II, S4), when I tap on the access point all I get is: Obtaining IP address...', than ...
1
vote
2answers
93 views

How to evaluate a wireless network risk level?

When travelling everyone has to use structural wireless networks (managed by airports, hotels, museums, restaurants…). Some of these only open (80|443)/tcp/ip once you have provided an E-mail or ...
1
vote
2answers
146 views

Shared Office Network Security - VPNs, Firewalls, and systems

First, let me premise this post with the fact that I am completely new to network security. I have done a fair bit of reading up, but I am certainly by no means a professional. If anything I say here ...
1
vote
2answers
66 views

Security risk of a service that allows a user to test from connectivity from a server to a printer

What are the security risks in adding a feature to an application which allows users to test for connectivity from a server to a printer? I'm planning to add a feature to my application to allow ...
3
votes
1answer
87 views

VPN Authentication and Network Administrators

Is it possible for a network admin (or attacker) to monitor traffic sent to a VPN server during authentication and end up being able to decrypt the data as if they were the legitimate user? I don't ...
1
vote
0answers
157 views

Attackers on sc.imp.live.com [closed]

"Deceptive site ahead Attackers on sc.imp.live.com may trick you into doing something dangerous like installing software or revealing your personal information (for example, passwords, phone ...
3
votes
0answers
113 views

Different IPv4 numbers from different browsers, same computer

If I search on Google the words "my ip" using Firefox, Google returns a IP that belongs to my ISP: About 447,000,000 results (0.46 seconds) 200.x.x.x Your public IP address But, if I made the ...
16
votes
3answers
5k views

Running windows in virtual machine, should I bother with security?

I'm running Windows in a virtual machine on my mac (via Parallels). Should I bother installing antivirus, firewall and using other conventional wisdom practices (like don't open unknown .exe etc)? I ...
2
votes
3answers
167 views

Using more routers makes my PC safer?

I have a router and my ISP provided me a new router. Makes sense using the two as PC -> router1 -> router2(internet) or I'm just slowing (small, 1 or 2ms) my internet for nothing?
-2
votes
1answer
56 views

How to add scripts in HTML file passing through network? [closed]

how to add JavaScript file to every HTML document that is passing through your network ?
1
vote
0answers
33 views

Is there an easier way to test suricata has enough resources to run without losing packets?

I'd like to see the effect of changing my Suricata hardware and software, and in particular make sure I can determine the rate above which I'll start to lose data. I'm running ESXi with 20 cores and ...
19
votes
4answers
2k views

Detect non HTTP packets using port 80

We are currently doing port whitelisting on our firewalls which is working well but this of course does not prevent the implementation of side channels or the misuse of these ports for other purposes. ...
1
vote
1answer
149 views

What are the advantages and disadvantages of installing an operating system through network? [duplicate]

Netboot is a technology that allows a computer to boot through the network, instead of starting on a hard drive, USB stick or DVD, it connects to a remote server to retrieve a disk image to start. It ...
-1
votes
2answers
89 views

Determining Firewall settings (Ports, etc) for specific applications

How can we identify the network or network firewall requirements for a Desktop or Web application. Meaning what ports are required by the applications. How the Cloud and non Cloud networks communicate ...
1
vote
0answers
16 views

Where can i find information about Ipsec Xfrm framework?

I have searched online and found very little information about the ipsec xfrm framework, including the book Networking implementation and Theory.. Where can i get more information about xfrm ...
1
vote
2answers
190 views

A question about arpspoof command

The arpspoof command will spoof default_router_ip's MAC address on all victims in the subnet arpspoof -i <NIC> <default_router_ip> How does it fool the router about the MAC addresses ...
1
vote
1answer
78 views

is it possible to intercept network packets outside lan?

User A is in a different country than user B and they have different IP ranges and ISPs. Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
2
votes
1answer
50 views

Is a “standalone WPS server” possible?

Wi-Fi Protected Setup (WPS) is a network security standard to create a secure wireless home network. It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a button,...
2
votes
1answer
81 views

Linux (!) Network Architecture for CTF-scenario [closed]

My boss recently enrolled me in an InfoSec training. I am part of the network team, but have limited experience in InfoSec. My first assignment is to draw a layout of a network that will be used ...
60
votes
4answers
6k views

Why should servers be placed outside of the corporate network?

In an answer to How do you deal with massive port scans?, user tylerl said: ... And you, like a wise IT admin, run all your servers elsewhere on the internet, not inside your corp network, for a ...
0
votes
0answers
175 views

Isolating Computer on Home Network Using Multiple Routers

My goal is to isolate a computer on my home network. This computer (a rapsberry pi) should be considered untrusted and is accessible from the internet (port 22). I need a solution that will prevent ...
27
votes
4answers
4k views

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is 85.25.217.47 which seems ...
1
vote
1answer
86 views

Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?

We're setting up NIDS monitoring and the bosses want to monitor all the ports, but I'm wondering if this actually makes sense. The switch we're currently using can only mirror 4 source ports to one ...
3
votes
1answer
69 views

Can still ping from secure network?

I have a standard network and wanted to make a more secure one so I bought a second router and set it up as a separate network daisy chained so it can get internet. I managed to make the setup, with ...
1
vote
4answers
166 views

Which of the TLS/SSL and IPsec protocols is effective?

Which of those two protocols is the most effective for sending data from a client to a server on a local network (knowing that I aim to use it for FTP traffic)?
2
votes
1answer
141 views

Linux responds to ARP requests for other interfaces - could this be a security vulnerability?

Linux responds to ARP requests on all interfaces by default. To explain, say you have this setup: Client 1 ---> [eth1] server [eth0] <--- Client 2 And the server's eth1 IP is 192.168.1.1 and ...
1
vote
3answers
316 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...