Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
1answer
129 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
2
votes
4answers
1k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
0
votes
2answers
451 views

Encryption of PCI data, and PCI-DSS scoping

I read another question which made me think... If you encrypt PCI data (credit card numbers, etc.) using PGP or AES and send it through a firewall, is that firewall in scope? Alternatively, what ...
0
votes
1answer
992 views

What are the realistic chances of email being intercepted via SMTP/TCP-IP? [closed]

Dear SMTP and TCP/IP network security gurus: I'm curious about what is the realistic risk of sensitive information (such as a email pdf attachment) being intercepted/read by a hostile party from a ...
2
votes
1answer
8k views

OpenVPN Tap vs Tun Mode [closed]

I would like to know practical difference between TAP and TUN mode when use with OpenVPN. When to use TAP and When to use TUN ? What types of traffic will pass with both mode ?
1
vote
2answers
125 views

Home network website tracking [duplicate]

Can my Website history be tracked by my work IT team if I am using my own home network with my work tablet?
-1
votes
1answer
65 views

Network and data security for small online businesses? [closed]

What is the most efficient way of protecting small online business from outside threats. Everything too much expensive is not a solution. I've been looking for good web application firewall and at ...
1
vote
3answers
385 views

Best practice for accessing management port of firewall

I'm in the process of setting up a bunch of servers at the other end of the world (well, 8 hours travel time) in a co-location place. The servers and firewall all have a remote management port (KVM, ...
0
votes
1answer
112 views

Are there any Layer 2 Wifi RFC proposals that isolate each connection from each other? (like a switch)

It's my understanding that everyone on the same Wifi protocol has full access to each other host that it is connected to. Is there any Wifi technology that allows for partitioning and isolation of ...
2
votes
2answers
1k views

How to detect NAT - network address translation?

How to detect if NAT is used in network or not ? I know if you have private address and you are able to connect public network or internet then there must be NAT. But How can I detect that NAT is ...
0
votes
2answers
194 views

How to detect authenticity Of Client and Server Certificate?

How its possible to detect authenticity Of Client and Server Certificate. For example, If server A has certificate and someone C stolen its certificate and send it to B then How we decide that it's ...
0
votes
2answers
870 views

Digital Certificate “Signature and Fingerprint”

What's the difference between Digital certificate's signature and fingerprint (thumbprint) ? I know that Signature: The actual signature to verify that it came from the issuer. and Thumbprint ...
3
votes
2answers
424 views

Why don’t SMTP servers just require all senders to be authenticated before accepting mail?

Why don’t SMTP servers just require all senders to be authenticated before accepting mail?
2
votes
1answer
379 views

Why am I unable to connect to an address spoofed with arpspoof?

I wanted to see how many combinations of websites and browsers are still vulnerable to a tls stripping attack (like, by implementing HSTS or disabling cleartext HTTP altogether). To do it I wanted to ...
9
votes
2answers
464 views

How were weak passwords brute forced in github?

Github faced a brute force password-guessing attack recently that involved "nearly 40K unique IP addresses". Passwords were also "stored properly" using bcrypt, (salt + hashed). Given that bcrypt ...
0
votes
1answer
107 views

How to investigate this anomaly?

According to the IT managers, this problem is neither at the server nor at the client but is suspected to be somewhere inbetween e.g. some DNS server that has been infected. Do you recognize this ...
1
vote
1answer
3k views

What details does my iPhone reveal about the user (if any) when I connect to a wifi network?

I accidentally used my work's wifi to look at porn using my iPhone. I refreshed a tab I had open from a session when I wasn't at work. Now I'm worried my firm will find out. The network is ...
3
votes
2answers
2k views

What is the difference between SSH and IPsec?

There seems to be similar encryption going into both. They both use asymmetric (RSA, elliptic curves, etc) for the initial key exchange, then go to some symmetric (AES, Blowfish, etc) protocol. I'm ...
2
votes
1answer
373 views

How can I secure IP Multicast traffic?

I'm interested in securing IP Multicast traffic for content that will be sent globally with several low bandwidth receivers. I understand that simplified Broadcast encryption takes N public keys ...
0
votes
1answer
91 views

Why do I get all of these bad header checksum messages?

Every time I open my browser, I get tons of these bad header reports. What does this stem from?
2
votes
3answers
329 views

Suspicious VMWare connections that bypass firewall

I'm running VMWare 5 and I have found that when I start up VMWare I see two connections: TCP 10.100.100.161:55555->as-40816.engx.vmware.com:https (ESTABLISHED) TCP ...
1
vote
4answers
508 views

Can Your ISP use a Packet Sniffer? [closed]

Can ISPs presumably use packet sniffing applications such as wireshark and monitor my unencrypted data? Are they "allowed" to do so?
3
votes
2answers
414 views

Using only a firewall, how do I protect a database server from be exposed?

If I had two firewalls, I could put a web server within a DMZ and then with the second firewall restrict the access to the DB server. However, If I only have one firewall, how could I accomplish ...
0
votes
1answer
549 views

What utilities can be used for Ping of death attack?

Can somebody tell me what program can mess with pockets and enlarge them for Ping of death attack? (i need it for lab) Is there anywhere step-by-step instructions of this attack? I'm not a hacker ...
1
vote
2answers
2k views

How do worms spread over LAN? [duplicate]

I've been researching LAN recently, and I came across a post talking about viruses spreading over LAN, and I was wondering, how is this possible? Would it not be a huge security issue to allow files ...
4
votes
4answers
1k views

Security provided through MAC filtering: Wired vs. Wireless Networks

My question refers to the following article on Wikipedia: MAC Filtering. The article states: MAC filtering is not effective control in wireless network as attackers can eavesdrop on wireless ...
0
votes
2answers
738 views

Could my computer be infiltrated if someone knows my external IP? [closed]

Could my computer be compromised if someone knew my external IP? I know that when you type that in it just goes into the router page, but my computer is connected to said router. If so, what is the ...
2
votes
1answer
145 views

Security implications for two applications communicating with TCP/IP on localhost

Considering this for the local loopback connection: - It is implemented entirely within the operating system's networking software and passes no packets to any network interface controller. If ...
0
votes
2answers
514 views

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network?

Is it possible to detect when a device has been MAC filtered on a Wi-Fi network? I don't know if it's in the 802.11 standard, or if it's just implemented by ignoring the client network packets.
0
votes
1answer
1k views

Cable modem/router hidden internal ISP network?

I was querying my router(Thomson TCW750-4) over the SNMP and stumbled upon some interesting information. I see that the router actually has five separate network configurations operational: ...
3
votes
2answers
153 views

Is it possible to assign MAC-address-specific passphrases for a WiFi network?

Private network access security can be defined by a unique WPA2 passphrase to grant access to devices and MAC address filtering to control authorized devices. Nowadays mobile devices are legion, so if ...
0
votes
1answer
308 views

What can't a packet sniffer troubleshoot [closed]

This might seem like a really vague question however I am studying a networking course. One of the many aspects requires the use of a packet sniffer software - in this case I chose Wireshark, which I ...
1
vote
3answers
2k views

What are the main differences between the network-level and the application-level regarding information security?

I'm fresh new to the field of security, so I'm sorry if this question seems stupid to you. What are the main differences between the network-level and the application-level regarding information ...
3
votes
1answer
403 views

How is a Tor hidden service immune to exit node attacks?

Let me explain with a nifty diagram: IP/RP <-> bunch of Tor clients/node (Tor circuit) <-> Tor hidden service Wouldn't the last Tor client in the circuit knows that the message is for the Tor ...
6
votes
3answers
6k views

with IPv6 do we need to use NAT any more ?

I'm wondering how to use NAT with IPv6 ...seems that you don't even need it any more. So what exactly is the concept behind firewall configurations in IPv6 environments?
0
votes
1answer
223 views

SIEM v/s Network Forensic

when SIEM is already implemented in a enterprise network; does it not do all tasks and report like network forensic investigation? Or can we do away with SIEM and have only Network Forensic tools ...
1
vote
1answer
257 views

Disabling Ping/ICMP Requests [duplicate]

Are there any benefits from disabling Ping/ICMP requests on servers? I've read where people say to do it but I can't seem to find any real benefits with it. Only more likely to cause more problems. ...
2
votes
2answers
587 views

What order is best for nesting VPNs?

if anyone is available to give me advice on a VPN situation I'd appreciate it. So the story is, I have one Swedish VPN which I trust not to log, and which I've connected to with my real IP, and I've ...
1
vote
2answers
177 views

Does this show the need for a two-factor authentication?

I need some help for my understanding while reading through this authentication scheme in WEP. In a WEP authentication scheme, the station first sends a request for authentication. However, this ...
0
votes
1answer
1k views

How to secure my network, laptop, ipad and email accounts which are possibly hacked?

Background Last month I noticed lots of failed emails in my inbox and after few minutes I lost my access to my Yahoo Mail. My friends informed me that they have received spam emails from me. So I ...
1
vote
3answers
319 views

Remote IP scan detected

I would appreciate if you take some time to go over issue I am facing. On my laptop I have windows 7 installed, I am using ESET Smart Security 5.2.9.1. As I work 9 hours day online I am seeing a ...
2
votes
1answer
918 views

Open source video conferencing software with encryption [closed]

A couple of friends and I are looking for an open source video conferencing software. We'd like to run the server on a Debian box, but the clients are Windows machines. Most importantly, it should ...
-1
votes
1answer
111 views

Benefit of having strict ACLs [closed]

My company uses strict ACLs for the connection between two boxes. What are the benefits of these?
1
vote
1answer
87 views

Set Gateway for our LAN

I am new to Networking. In our organization we try to setup gateway for security purpose so that we can block certain harmful websites. All I know is gateway is a device. What we have is the LAN ...
0
votes
1answer
135 views

TCP IN connection from another user in my home network. Is it safe?

I'm using Comodo Firewall and I noticed that sometimes I'm getting TCP IN connection from another IP address in my home network (only one router and few wireless users): TCP IN | 192.168.1.50 | ...
0
votes
2answers
278 views

Isolating host machine from external network

How to prevent a host machine from sending/receiving packets with the following network configuration: eth0 - physical NIC :: not configured; tun0 - virtual NIC for VM which role is the gateway for ...
8
votes
1answer
367 views

Is the system bios and network card protected by the OS firewall?

My question arises from trying to understand new types of spyware that target the system bios and/or network card. Is the system bios and ethernet card both protected by an OS firewall set to deny ...
-1
votes
1answer
249 views

What are the security concerns when connecting to a WiFi network? [duplicate]

I connected my phone to a protected Wifi network that is not my own. Can anyone accessing the same network be considered a threat on my mobile device? Is it easier for hackers connected to the same ...
10
votes
3answers
515 views

Should a hostname ever be considered a secret?

I've been told in the past that you should never give out the host names of computers on your network. I can't think of any reason why this would be the case. Could someone tell me if they should be ...
1
vote
1answer
146 views

SSL on domain will affect un-secured sub-domain

I have a plan to buy a SSL certificate for my domain. I don't have much budget so I decided to buy standard SSL with no support for sub-domains. I have a WCF web-service that works on sub-domain. This ...