Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
0answers
8 views

Is AES-GCM length extension attack possible using authenticated decryption?

I am looking to encrypt a piece of data using AES-GCM with a full 16-byte GCM Tag and send it over the network using UDP. Is it safe to assume using the AEAD nature of AES-GCM that performing ...
2
votes
2answers
63 views

Connecting trusted and untrusted networks

We have two domains that are isolated. First domain is the Corp LAN, the second is an hostile untrusted network with untrusted clients that could contain malware. Clients on the untrusted network ...
-4
votes
1answer
82 views

How The Sony Hack Was Traced, and So Quickly? [on hold]

What are the steps that are required to locate a source that have routed their traffic through multiple zombie hosts, spanning multiple networks/carrier/nations?
-6
votes
1answer
43 views

Why study Information Security? [on hold]

This question might be considered as overly general, but it has occupied my mind lately. I have decided to study Information Security (to be more particular, 'Networked Systems Security') at ...
0
votes
1answer
48 views

User Binding Request with credentials in Lync Dump

I've dumped a call between two lync clients and saw that there were some UDP packets that look like this: Server -> Client 1132 14.495362000 <serverip> <clientip> STUN 146 ...
0
votes
2answers
77 views

Only HTTP(S) port is open. Why do I need to worry about unpatched software?

Unpatched software poses no risk by themselves. They're only problematic when someone exploits it. How could malware get into my system if I do have unpatched software in general and I'm connected to ...
2
votes
1answer
193 views

Are COMET installations immune to “Slow TCP Reading” DoS on Windows? (Such as SignalR or WebSync)

My understanding is that COMET implementations of WebSync and SignalR do not directly use IIS and are a few layers lower on the ISO model. After reading Qualys's blog regarding slow TCP reading, I ...
0
votes
1answer
42 views

Why is browsing while logged onto a VPN from public wifi more secure than not?

I've been trying to wrap my brain around VPNs for a while now, but can't find a good source that answers the questions I have. In particular, I can't understand why browsing from a public access ...
2
votes
1answer
133 views

DNS Cache poisioning examples, or other criteria when a client ignores a response

Is there a concise set of rules that describe what 99% percent of DNS responders accept? Conversely, are there are set of rules that define when DNS queries are invalid? I would think that the ...
0
votes
3answers
98 views

How are computers identified across networks?

IP addresses are assigned to computers when they connect to the internet and change depending on your location. However, I read that your computer also has an address that doesn't change. So, when ...
33
votes
9answers
15k views

Are powerline ethernet adapters inherently secure?

I have 2 Zyxel PLA407 powerline adapters. Router is downstairs connected to one adapter, other adapter is upstairs about 30 feet away connected to a desktop. I have a house, not an apartment or ...
1
vote
2answers
62 views

When do I use IPsec tunnel mode or transport mode?

I basically understand how tunnel mode and transport mode works, but I don't know when I should use one instead of another. Among the two parties who want to communicate, if one computer B doesn't ...
3
votes
2answers
117 views

Is HTTPS redirecting to HTTP a vulnerability?

Let's say a user is authenticated, and the entire account authentication process happened under secure HTTPS. Upon successful login, the user is redirected back to the homepage. However, the homepage ...
2
votes
1answer
51 views

Does having a VPN service mean accessing my email etc. over public free open WiFi mean I have security/privacy? [duplicate]

Is my information secure over public WiFi if I use a VPN service? i.e. protection of emails and login details.
7
votes
5answers
1k views

What Man-made Physical Threat Could Pose Severe Danger to a Server Farm?

I am writing a novel in which a researcher attempts to work against a study he is a part of by purposely sabotaging operations on the research compound. I am wondering if the following is plausible. ...
-5
votes
0answers
58 views

Security through obfuscation [closed]

Well, the obfuscation part is something everyone thinks about, most significantly it's a well proven method to force an attacker into a longer reconnaissance period, providing more time to catch them ...
36
votes
4answers
4k views

Can a neighbour who installed my router access it?

I have a bit of a security concern. I'm concerned that my neighbor sees everything on my computer, web sites I have visited, my passwords, etc. Background: He installed a Linksys router in my house ...
-3
votes
3answers
74 views

How to hide my ip and browsing history from others on my network?

I need to hide my activity and IP address from those I share this network with. I'm unsure if a VPN will serve my needs, because I'm not concerned about the sites I access tracking me. I'm concerned ...
1
vote
4answers
110 views

Strange device in routers client list

Due to a high number of clients connected to one of my routers I recently changed it's password and reboot it. I also disabled WPS. The router is a ZyXEL Prestige 660. After the reboot the client ...
0
votes
2answers
1k views

DrayTek Vigor 2920 HTTPS allowed

In my office we have a DrayTek Vigor 2920 router, with CSM setup to only allow certain keywords (keyword objects) to certain IP groups. This all works fine, however we've discovered that all HTTPS ...
-3
votes
0answers
36 views

What is the best small zombie program or application can use as a zombie for practice? [closed]

I used Backtrack as an attacker and Sift as a victim, but I don't know what is the best and smallest program or application I can use as a zombie ?
0
votes
1answer
481 views

JUNIPER Junos Pulse - how to apply policy to device

We'd like to set up and use Juniper Junos Pulse on iphone and ipad for access to Corporate mail. We have juniper SA and have prepared the policy, but how do we apply the policy to the devices?
8
votes
3answers
115 views

What are the risks to a network if a single computer is compromised?

If I open up a dedicated server on my home network to accept incoming connections (HTTP, SSH, etc) and that machine is compromised by an outside attacker, what are the risks to other devices on the ...
2
votes
1answer
120 views

Sticky keys on RDP

A recent report on page 18 states that: [black hats] have even leveraged [systems administration tools] as a means of maintaining additional persistence via setting “sticky keys” for RDP sessions. ...
0
votes
0answers
24 views

Fetching remote content in PDF files [closed]

Does there exist a commonly supported way for PDF files to fetch remote content like images? I understand AdobeReader supports javascript but I was wondering if reading PDF files in other pdf readers ...
9
votes
2answers
8k views

Is it possible to use the aircrack-ng tool to crack a WPA2 Enterprise network?

is this tool (aircrack-ng) capable of cracking into a WPA/WPA2 Enterprise network? This tool has major success cracking the passwords of WEP/WPA networks. If it can, how, but if not, is there another ...
0
votes
1answer
47 views

VPN Security in inner network [on hold]

I am looking to a setup a VPN connection from one server to another. On one end there is a server for video monitoring that works with all the information gathered and sends it further (Server A). On ...
2
votes
2answers
99 views

What are the advantages to using a VPN over secured/trusted wifi

It's often recommended that you should use a VPN when using unsecured or untrusted networks, such as open public wifi or secured wifi that you don't control. What are the advantages to using a VPN on ...
2
votes
1answer
72 views

Redeploying multiple Secure sites on a single server

This may not be a great site for this question. I basically have approximately 10 VPS instances running a secured website each, each with their own SSH connection to a hosted Database. What I'm ...
1
vote
1answer
108 views

How to configure Kismet to redetect same BSSIDs in a loop?

So I am working on a tool to detect any wifi device using Kismet. When I use Kismet, it works fine, but my problem is, it detects a device once, and until the MAC changes, it wont detect it again. ...
3
votes
1answer
112 views

Is it possible to retrieve SSH v2 credentials in a username/password authentication scheme?

I'm currently analysing a compromised network(root access has been gained to a workstation and logs show that it has been used for port scanning and service brute forcing attacks on the remaining ...
2
votes
3answers
144 views

How to know what others browse through the network?

My friend connected to WIFI and after 5 minutes he told me which sites I had actually been browsing, and who I chat with. My question is: how do I defend myself against this, and also how did he do ...
0
votes
1answer
52 views

WLCTL protocol detected by sniffer in an Android tablet

I detected that my rooted Android tablet had a slow connection. Trying to find what is taking the bandwith, I installed a firewall (DroidWall) and I blocked all the applications thinking that one of ...
0
votes
1answer
114 views

Is there a way to block all TOR traffic incident on my public servers?

I don't want any connections coming from a tor network to be accepted by my servers.
0
votes
1answer
27 views

Unsecured Guest access on Macbook Pro

I am concerned that my personal, home based Macbook Pro guest network access may be being used by an outside source. Is there a way for me to identify user access, time logged in / out, etc?
1
vote
3answers
55 views

What Mechanisms Keep Network Processes (and Applications) Sandboxed

This question stems from my other question, sorry if it is too similar. Now I would like to know what mechanism is used to sandbox network processes and (if relevant) individual programs, if at all? ...
1
vote
3answers
79 views

What security implications are there when sending video feed over unknown applications, and how can we protect ourselves?

This might sound broad -- but it has to be considering the details are truly unknown. Context: Our university (and many more) have begun rolling out mandatory webcam recording for certain portions of ...
0
votes
1answer
284 views

How to get a Network's WIFI Password through CMD?

I found that Wifi's Password can be retrived using the network and sharing wizard in Windows, And Technicaly theres no way to store Passwords/collection of bytes in the memory after switching/shutting ...
-1
votes
0answers
16 views

Problem setting up two Wi-Fi module for two way communication [migrated]

I have two Wi-Fi modules (Moxa AWK 3131) from MOXA. I am trying to set up these two modules in such a way that they can talk to each other. I have connected them as follows, I have configured the ...
0
votes
3answers
208 views

Installed some software over a public insecure wireless network — should I consider myself compromised?

A couple months earlier, I made the mistake of downloading some software over an insecure wireless network and running it without checking its integrity. I am now considering reinstalling my system, ...
0
votes
1answer
50 views

What's a least-privilege way to allow node.js to access network adapters on Linux?

Linux naturally restricts all but superuser from pulling traffic directly from network adapters. In the case of Wireshark/dumpcap, setuid root is used ONLY for dumpcap, restricting the privileges ...
4
votes
3answers
27k views

IP address of an iPhone

Recently I logged on to my bank account via the Chase app on my iPhone. I received a message that another device was currently logged on to my account and "would I like to end the session"? Of course, ...
1
vote
1answer
312 views

Attacking a server on port 80 while only port 22 is open on the firewall

There is a question bugging me a after reading on network security. Theoretical situation: there is a packet-filtering firewall, which only accepts tcp/ip communication with destination port 22 on a ...
0
votes
2answers
199 views

connecting a secure computer directly to the internet without a router

If you have a fairly secure computer how dangerous is it to connect to a modem directly without a router in between. Let's say the computer is running Debian as a host and Whonix in VirtualBox, a VPN ...
1
vote
1answer
71 views

How can I implement a whitelist based on packet content?

At the moment I am looking for some way on Linux to have packet filter whitelisting done but based on fine-grained parameters such as packet content rather than more general parameters such as ...
1
vote
3answers
239 views

What is same site scripting and what are some exploit scenarios?

I know it is an issue with how DNS is configured , but is it really dangerous if the attacker couldn't access your network?
0
votes
4answers
111 views

Basic question about why it's useful to have VPN encrypt traffic

There may be a basic flaw in my understanding of how the internet works so sorry if this is a simple question. What type of attack does VPN protect against? For example if a local area network (let's ...
2
votes
3answers
44 views

Find the destination script of an inbound TCP connection on our shared webserver

We have a shared webserver which is being monitored constantly by our ZABBIX agent. On some hours of day we have unusual TCP traffic on port 80. Lets say we have over 400 connections from IP address ...
0
votes
0answers
16 views

Limit VirtualBox guests to one network interface [migrated]

I have one Linux (Ubuntu) box and inside two Virtualbox guests (guest1 + guest2). The host has two interfaces. (eth0 + eth1) I need to define: Host uses only eth0 Guest1 uses eth1 Guest2 uses eth0 ...
3
votes
4answers
208 views

How much of a risk to students is an open WiFi network on campus? EDIT: please read in full.

I've been battling bureaucracy at my community college for months on this issue; a few months ago, they changed security on the SSID for students; It used to use EAP, allowing students to enter their ...