Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

2
votes
1answer
436 views

How are ACK storms created and what's a good mitigation strategy for them?

The context is network based load balancers. It would be nice if someone could explain how TCP ACK storms are generated in real life and practical mitigation strategies for them. Edit: Clarification ...
1
vote
2answers
148 views

Why do client certificates not protected against improper server certificate validation

I understand the question of client certs and MITM attacks has been asked several times, but I don't believe this specific scenario has been answered. It was my (seemingly incorrect) assumption, that ...
0
votes
1answer
106 views

Securely transmit sensitive data

I am creating a java application which is dependent on a server. On startup the application will transmit sensitive information (passwords and emails) which will be sent to the server and from there ...
0
votes
3answers
199 views

How to safely mirror network traffic for audit reasons?

We have an internet connection that we need to audit: INTERNET ->> ROUTER ->> CLIENTS our idea would be to put a (enough big) HUB before the router (router, that logs in via pppoe to ...
3
votes
2answers
1k views

Why do multiple IP Addresses in my local network point to the same computer?

I'm new to linux and nmap, and I am attempting to do a scan of my local network. Using nmap I find that there are 4 hosts on my network (10.0.2.2, 10.0.2.3, 10.0.2.4, 10.0.2.15). I am using VirtualBox ...
14
votes
6answers
2k views

Defamatory post - obtaining evidence tracing perpetrator right to his laptop

A month ago, someone posted an ad with my personal details, including my home address, my phone number and my photo on an ad with very a very defamatory write up. What followed was a week of calls ...
0
votes
1answer
49 views

Industry standards for threat names

One of the security appliances we own reports a so-called "Industry Name" for the threats it detects on the network. I wanted to know if there is really such a standard and where I can find ...
0
votes
1answer
190 views

Cryptic threat names

I have logs from a security appliance from Damballa which has cryptic names for threats observed in a network which I am trying to make sense of. Some examples of these threats are "RedTreeBruisers" , ...
0
votes
1answer
814 views

Protecting MYSQL with Fail2Ban? [closed]

I have a bunch Raspberry Pis collecting data from behind client firewalls. I want to start sending this data to MYSQL server. Because the Raspberry Pis do not have static IP addresses, I obviously ...
5
votes
3answers
566 views

How did the spammers get this address?

A few months ago I configured a test mail server on Amazon AWS, all legit. I used a new address to my catchall-domain (something similar to, but not exactly, ...
2
votes
1answer
162 views

What features boost security for a home edge router?

I want to hide my home network behind a router and not worry about firewalls on internet-facing devices. Furthermore, one PC is going to be hosting some services, so I guess I need port forwarding as ...
1
vote
2answers
482 views

Why are Windows computers open to network file access by default?

I'm on a work network, and I had some files I wanted to give to a colleague. I set up a shared folder and directed him to my computer name to open the shared folder. Then I remembered from a long time ...
4
votes
2answers
506 views

Has there been any documented cases where hackers have hijacked the phone number to a business?

Has there been any cases where hackers have taken over the phone number to a business, by creating a phone number in the same area code, setting up a virtual PBX / Asterisk system, routing all calls ...
2
votes
2answers
236 views

Indirectly relaying intranet server to outside world

I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
1
vote
2answers
286 views

Idea for hiding your mobile phones' location, and still be able to place and receive calls. Any suggestions?

The diagram below is a thought experiment that could provide a certain level of privacy to mobile (smart)phone users, beyond what they currently have. Some of it is purely theoretical, but it should ...
2
votes
2answers
484 views

Basic Security Knowledge [closed]

Perhaps I am being both naive and overly ambitious in my first post but I have a huge interest in learning about network and system security and am at a loss as to where to begin. I realize that stack ...
-8
votes
1answer
168 views

Viable way to ruin a milk corporation? [closed]

Hack into their system and change the "Sell by" date so that it is immediately bad. How long do you think until they notice, if you pull it off?
1
vote
1answer
201 views

Is a separate server needed for remotely accesing accounting software?

Wishing you all a great 2014. I hope this is the right section. Basically we have a Dell Poweredge R520 server in our office, and we now want to install some accounting software that can be accessed ...
1
vote
1answer
205 views

Secure chat — is CTCP a good option?

Not sure if this is the proper forum for my question, but I've recently read over at Encrypt Everything that CTCP is a poor choice if you want to keep your chats secure. I'm beginning at security, so ...
1
vote
1answer
124 views

Spoofing and guest network security

I know a little bit about network security but it's only about enough to know there's a lot I don't know. My requirement is to add a 2nd wifi to my current setup (1 wifi emitted by a ...
1
vote
3answers
130 views

How to guarantee privacy on files that I store

I want to create an Android app where users from an office (typical use) can upload scanned documents to the app backend service for later use. e.g. A lawyer want to upload a sentence ...
0
votes
2answers
500 views

What information can be gained from an Email Header?

What information is present in an Email Header that can be used to track a sent mail? For example, are some of these present? Web Browser used? Operating system Type of Network (broadband/dial up)? ...
1
vote
3answers
310 views

How do i restrict network access to LAN for Visitors

How do i restrict network access to LAN for Visitors In my organization premises any outside visitor comes and connect to LAN ports in meeting rooms.We have seen that they are able to ping internal ...
1
vote
2answers
221 views

Isolating guest networks

I'm setting up a secondary guest wifi on my router and I want to make sure that it's impossible for clients connected to the guest wifi to access my primary network. Initially, I used IP filtering ...
0
votes
3answers
173 views

If someone has access to VPN and your computer, is there a point of using VPN?

If someone sniffs requests coming from my computer and my VPN's computer, there's no point using VPN, right? Because they can see the time when I made a request to my VPN and they can analyze all of ...
4
votes
2answers
500 views

Is setting up my own VPN more secure than buying from third party vendors?

When Googling for the most trusted VPN provider (for keeping your anonymity), some users say that the best way to go is to just setup your own (e.g., OpenVPN) using a dedicated server. How is this ...
0
votes
1answer
91 views

What is the best approach to protect against BYOD? [closed]

I would like to know briefly what are the best practice to protect corporate network from BYOD challenges nowadays? Thanks a lot!
0
votes
2answers
146 views

Getting detailed information about an infected website

I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the ...
6
votes
1answer
1k views

Using skype for an attack

I am curious about something; let's say someone randomly added me to Skype and tried to initiate a chat with me and I want to know more about them but I am worried if they can do some damage. My ...
1
vote
5answers
329 views

“Safe” public WiFi [duplicate]

Is there any danger of any of my computer's files being read or changed (mainly - infected by malware) in the following scenario (I'm using Windows 7): I have file sharing turned off (in "advanced ...
1
vote
3answers
1k views

Why P2P need portforwarding when behind NAT? [closed]

Correct me if I'm wrong, but for a node to participate in peer-to-peer, if it's behind a NAT, it most port forward to be able to connect. Why is the port forwarding necessary? I know there's ...
1
vote
4answers
2k views

Is there any solution for block the HTTPS traffic using URL filtering?

The URL filtering can block the HTTP traffic but not the HTTPS traffic in Internet Explorer. For example, the website http://www.facebook.com is blocked by the URL filtering while the ...
0
votes
1answer
477 views

Netgear WNDR4000 open port 53

Why is port 53 open on the WAN side of the router? And more importantly how do I close it? Port 53 is not one of my forwarded ports. Discovered by doing nmap -pT:1-64 <my-external-IP> -Pn ...
1
vote
1answer
195 views

Separating Apache and MySQL over Tor for security, performance, and reliability

I'm trying to set up a hidden web service over the Tor network, and I was thinking of making a configuration where my Apache server and my database server are located on different networks. I know ...
2
votes
2answers
183 views

How can I be sure my former employer no longer has access to my computer? [closed]

How can I be sure now that I no longer work for a certain company that they are not accessing my computer from their side. Strange things happen ( someone remove a certain set of my friends on ...
1
vote
1answer
9k views

How much can someone see from my iPhone by connecting to my wifi

How much can someone see from my iPhone by connecting to my wifi and can they copy my messages files documents etc
24
votes
2answers
2k views

Do simple Linux servers really need a non-root user for security reasons?

Playing devil's advocate, Let's assume I purchase a Linux server from a hosting provider. I am given a password for the root user and am told I may login using SSH. The only purpose this server has ...
1
vote
2answers
487 views

arp request to a ghost host

All the clients in my wireless network send continuously arp requests to a host that doesn't exist (I've checked its absence with nmap -PN [IP]). The clients use windows 7 and windows xp (here the ...
-1
votes
1answer
193 views

Setting up a Secure Home Proxy for VPN Service Providers

VPN service providers such as ProXPN offer a service in which you pay a monthly subscription, allowing you to download an app for Windows or Macs so that your traffic goes to the internet via this ...
1
vote
1answer
691 views

Is it possible that my home ADSL router firmware was hacked?

I'm using a TP-LINK TD-8817 ADSL home router with a customized firmware from my ISP. When using the modem in router mode, I often redirected to a specific link owned by ISP. This is interesting ...
3
votes
7answers
345 views

How does an IDS identify a computer ?

How does an IDS identify a computer on the network. I mean do IDS' actually check whether a device is actually what it claims to be ? If so what factors does it check (MAC etc) ? For e.g. if a ...
3
votes
2answers
2k views

How do I securely separate a wireless subnet from the wired network?

My setup looks like this: In the interest of security, I'd like to separate the wired network (where the Workstation is plugged in) from the wireless subnet. I don't trust some of the devices in ...
0
votes
3answers
422 views

Why there are uninvited incoming packets to my ADSL connection?

To verify this, I boot my PC from Kali Linux live distro. Before establishing ADSL/PPP connection, I start Wireshark and listen on any pseudo device. Then I create the connection to ISP network. ...
0
votes
1answer
476 views

Sniffing 3g network Pockethound

I was wondering if its possible to prevent 3g sniffing. Its not about the security of the information sent over 3g, but being able to use your 3g without anyone able to see traffic. There are machines ...
1
vote
1answer
156 views

Why should I run OWASP Broken Web Applications Project as host only or NAT?

We have a hard time getting VMWare to work in bridged mode. We can get it to work in Bridged mode. Why is it so important to run it with host only or NAT?
6
votes
1answer
1k views

DSL Modem Compromised?

Just found out that the primary & secondary DNS servers have been changed to 95.211.156.101 & 5.45.75.11. I had the following setup in place. MAC filtering and WPA2 for WiFi. ...
0
votes
1answer
143 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
4
votes
4answers
2k views

Does using WPA2-Enterprise just change the attack model vs WPA2-PSK?

As far as I can tell based on the reading I've done so far, WPA2-Enterprise uses the same encryption and security algorithms and methods as WPA2-PSK, with the addition of using another service for ...
0
votes
2answers
536 views

Encryption of PCI data, and PCI-DSS scoping

I read another question which made me think... If you encrypt PCI data (credit card numbers, etc.) using PGP or AES and send it through a firewall, is that firewall in scope? Alternatively, what ...
0
votes
1answer
1k views

What are the realistic chances of email being intercepted via SMTP/TCP-IP? [closed]

Dear SMTP and TCP/IP network security gurus: I'm curious about what is the realistic risk of sensitive information (such as a email pdf attachment) being intercepted/read by a hostile party from a ...