Network Security - securing network infrastructure and connections
4
votes
4answers
292 views
Malware that uses http as a covert channel
I'm working on a http traffic analyzer and I need a collection of malware, which uses http as a way to get commands and respond, to analyze their network behaviour.
Is there any database of malware, ...
1
vote
4answers
202 views
Learn about network and security for securing a server
I'm setting up an OpenBSD server that I want to connect to the Internet (it's going to be used to host a site - so, with Apache, SQLite and the like).
I want it to be as secure as possible. Social ...
0
votes
3answers
287 views
Proxy Server options for school administrators [closed]
I want to set up a proxy server for a school to prevent users to log-in to site like Facebook, Youtube, etc.
I have no idea how to do this, so I´d really appreciate your help.
3
votes
2answers
620 views
How to use RC4 securely
I want to encrypt my network communications with RC4. The reason for choosing RC4 is the simple implementation and speed.
I need to have a pure Python implementation, because I cannot compile for my ...
2
votes
3answers
152 views
Are my credentials unsafe if I am already logged-in before connecting to a public network?
Let's say I am already logged-in to my Gmail or Yahoo account using my 3G then I switched to a public WIFI in an airport or cafe.
Is my username and password still vulnerable?
What others kinds of ...
3
votes
3answers
972 views
How can reverse proxies be used to bypass acceptable use policies of a company?
I am wondering how reverse proxies can be used to bypass company acceptable use policies?
What can be done to prevent it?
1
vote
0answers
438 views
SIEM-AlienVault; Risk Metrics, Assets, and basics [closed]
Been trying for a week now to get AlienVault (referred to as AV hereon) running with little success.
I've gone through 2 installs so far.
First time messing with SIEM, though have very limited ...
7
votes
2answers
1k views
Using RSA with 3DES instead of plain 3DES. Does it make sense?
I have a large legacy code. Currently it is using 3DES encryption for a network based application. It encrypts data packets with a main key. This key is used to encrypt and decrypt (symmetrical). And ...
-1
votes
1answer
204 views
Top Ten Security Weaknesses of a Networked Computer [closed]
I'm looking for a list of what you would consider to be the Top Ten Security Weaknesses of a Networked Computer, can be Windows or Linux specific but ones that apply to both are better.
I'm not as ...
1
vote
1answer
358 views
syn flood size per second
Given the size of a TCP packet is 60 bytes, there is a SYN Flood attack on a computer made by a 100 Mb bandwidth, the question is how many syn packets are sent in a second? Is there any formula for ...
1
vote
1answer
130 views
Limiting database security
A number of texts signify that the most important aspects offered by a DBMS are availability, integrity, and secrecy. As part of a homework assignment I have been tasked with mentioning attacks which ...
3
votes
5answers
3k views
Using Python for security
I love using Python for the scripts I need and for work. But I really want to learn Python for network security since I will start a NS course next year.
My question would be how would it be the best ...
3
votes
2answers
856 views
How to detect a virus in a network card?
How can I know that a network card in a server was infected by a virus or not? Are there any methods to check it?
2
votes
2answers
77 views
Using External Certificates on a network that doesn't permit outbound HTTP/S access
Some highly secure networks and DMZs prevent all communication to outside hosts. This can cause issues with validating externally signed data
I can guess that issues with signature validation occur ...
2
votes
3answers
127 views
Why is security across a network “hard” to achieve?
This may be a naive question. If it is, I'm fine with just a link to outside information. I studied RSA encryption about 2 years ago, but that's about it.
I'm just wondering: is it a matter of ...
4
votes
1answer
788 views
Physical machines not detected from a Backtrack VM
Some time back I asked about using metasploit on a virtual machine here. This question is a kind of 'part 2' of it.
My test bed set up consists of 3 physical machines: A, B and C. Each of them have ...
2
votes
2answers
352 views
Advantages of separating Web server from Database
What are the security advantages of installing the database of a web application on a server other than the one containing the web server?
2
votes
0answers
159 views
Global Networks - Are there any other than the Internet? [closed]
Here is the definition of Global Networks:
Currently does any Global Network exists (apart from Internet)? Can someone Quote some examples?
Doesn't every other WAN network comes under the category ...
0
votes
3answers
402 views
Can people use AES VPN tunnels to hide their activities from authorities?
I have read an article about programmers who use AES VPN tunnels when working remotely with clients from other countries. The article writes that this way their countries are unable to track their ...
4
votes
5answers
817 views
SYN Flooding issue
I recently purchased a server with "DDoS protection" and a 1gbps uplink.
What I can't figure out, is that I'm suffering from SYN floods. Isn't the large amount of bandwidth available to me supposed ...
6
votes
10answers
453 views
networking and security
I'm trying to pick up networking security within a reasonable amount of time. I'm not specifically looking to learn about all the little tools that are available (although I do want to know about ...
3
votes
1answer
241 views
Filtering network access on a user/group/process basis
I am interested in peoples thoughts on what the best approach would be to controlling access to network interfaces at a user/group/process level for a Linux based host. The scenario I have in mind is ...
1
vote
1answer
128 views
What does Bluffdale mean for privacy?
I posted a question related to tracing webserver attacks over here and the responses got me google-ing. My understanding has always been that privacy is dead
and that essentially there's always ...
1
vote
1answer
242 views
DNS query through squid? [closed]
My IDS picked up our squid proxy server doing a dynamic DNS request. I wasn't aware squid passed DNS requests from the client to the internal DNS server. Is this possible?
Snort Alert:
ET POLICY ...
24
votes
1answer
968 views
What's the risk if I accidently type my password into a username field (Windows logon)?
I'm used to logging into my personal Mac which is a password-only field (like waking from sleep mode). Sometimes I have to use a Windows network on which I have an account, but of course I have to ...
7
votes
3answers
521 views
Why don't wifi managers remember mac addresses for hotspots to defeat the jasager attack?
So I just learned about the jasager attack, via the wifi pineapple and it struck me immediately that it wouldn't work at all if network managers (privately) associated MAC addresses with hotspots and ...
2
votes
3answers
7k views
How to bypass restrictive mac address filtering on home network (not malicious)
Background
A short sketch of my situation before I formulate my question: I am on a large home network, which is privately administered by a couple of admins. The network consists of a lan and a ...
4
votes
1answer
117 views
Sulley - only using ASCII printable characters
I have a problem fuzzing FTP protocol. An example of a command fuzzed is the following data model, which should fuzz the "CWD [string]" command of the FTP protocol.
s_initialize('CWD')
...
4
votes
3answers
152 views
How (if at all) can an attacker manipulate an already established SSL/TLS Connection?
First off, this is a purely academic question. My first answer would be that he cannot since he does not have the session key.
Could he at least kill the connection, such as by sending spoofed FIN ...
2
votes
2answers
149 views
Has networking using multiple “unrelated” connections to share an encrypted data stream been researched?
I'm not exactly an expert, so I'm hoping you'll give me the benefit of the doubt and try very hard to make sense of this...
I've been thinking about a simple measure, which I'll call Multiple ...
0
votes
1answer
920 views
What are the security issues in ecommerce? [closed]
What are the security issues in ecommerce?
I currently have:
Transport layer security issues
data being intercepted (ccard details stolen etc)
Vulnerability in web app
SQL Injection
XSS
...
2
votes
1answer
92 views
ISP security compared to enterprise
I've just started reading IT Security, and found some interesting reads on man-in-the-middle and different types of "attacks" that could be used by an enterprise to intercept communications on their ...
0
votes
2answers
119 views
Can I connect our network to the internet but only allow connections to certain servers?
At work we have a network that is not connected to the internet however it is exposed to the outside work through USB drives and employees cell phones. I'd like to connect our system to the internet ...
4
votes
2answers
162 views
Can a MitM attack occur on an ISP's local exchange or street wiring cabinet?
If an attacker were to dig up the 'outgoing feed' from my local exchange or the street cabinet, could they sniff my entire neighborhood's network traffic? Or is this infrastructure secured against ...
1
vote
1answer
122 views
Maximum protection on a computer network?
I would like to secure as much as possible a computer I am using to sync sensitive data files from work to my home pc. The syncronisation is being done by only 1 software is there a firewall to allow ...
2
votes
4answers
3k views
How Team Viewer establish Remote Desktop Connection
I am wondering how is it possible for Team Viewer to establish the remote desktop connection over the internet even if the user has not enabled the 3389 port ?
I am searching over the internet but ...
1
vote
2answers
202 views
Wireless LAN router fingerprinting
Does anyone know of a database that lists the range of MAC addresses that are assigned to each particular brand of router? I would like to use this information for fingerprinting.
I know I can find ...
0
votes
3answers
100 views
Network Concerns Over a MITM Attack
If my website is hosted on a network of hundreds, possibly thousands, of computers wouldn't an attacker have to gain control of just one of them in order to conduct a MITM attack on my website ...
4
votes
5answers
2k views
Preferred UAC configuration in Enterprises that use Login scripts to map drives
In Windows 7, Vista and newer OS's, UAC will prevent logon scripts from mapping hard drives so that the following logon script code won't work:
Dim WshNetwork
Set WshNetwork = ...
1
vote
3answers
162 views
will all instrusion dectection will become host-based? [closed]
Will all intrusion detection become host-based once all network packets have been encrypted?
-1
votes
2answers
382 views
Certified Ethical Hacking courses [closed]
I want to take a CEH exam, I'd like to know what tutorials and books are recomended for this kind of study.
I also would like to know if there are certifications that are better-recognized, so that I ...
3
votes
2answers
449 views
How to use attack trees and attack graphs
I am trying to understand how attack trees\graphs can be used in the security process. I read a lot of papers presenting the topic and how this reppresentation can be useful, but I really don't ...
2
votes
1answer
194 views
Is SSL session based only? Is there a (formal) definition of an SSL connection?
In various docs on SSL there is a mention of connection.
But from the context I am not sure if this means the underlying TCP connection or the SSL connection.
I am thinking that there is no SSL ...
1
vote
2answers
139 views
Metasploit Development Reference
The Metasploit team provides some documentation on how to develop exploits, but other than looking through the sourcecode (which is annoying considering how much time I spend going from this file to ...
0
votes
1answer
72 views
NetRange and Router Sharing for Pentesting
When pentesting a network, call it ExampleNet, the network range sometimes exceeds 256 hosts, such as the range x.y.56.0-x.y.63.255. Does this mean that a compromised host on x.y.56.z could be used to ...
3
votes
2answers
1k views
Using Cain and Abel to capture traffic of machine in the same network
I have installed Cain and Able in machine A, which is connected to another machine B via a LAN. Now I want to analyze all the traffic of machine B. Is this possible by installing Cain and Abel on ...
1
vote
1answer
275 views
How to use sslstrip with Internet Connection Sharing?
I'm trying to make sslstrip work with Internet Connection Sharing.ve shared internet connection to router and another pc connected to that router, all are Linux, so
Internet <-> pc1 <-> ...
4
votes
4answers
3k views
Secure use of psexec or better alternative to it
I want to remotely start VMWare virtual machines (I own VMWare Workstation) and to this end I need to execute on host something like "vmrun -T ws H:\VMWare\VM1\VM1.vmx nogui" with user desktop ...
0
votes
1answer
279 views
NMAP Commands Used in Option -A
I've found that using the command nmap -A gives me the most reliable results and according to the reference guide the option -A includes service detection, traceroute, and OS detection. I want to do ...
7
votes
2answers
727 views
ports blocked by firewall and not the server
I was asked this question at an interview and i wasn't sure about the answer. The question was "suppose you were checking the open ports on a particular webserver which was behind a firewall, how ...
