Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [network]

Security of network infrastructure and network traffic. For questions about security of network equipment, topology, protocols, traffic, administration, and configuration. Related tags: [packet], [firewall], [network-scanners], [network-access-control].

0
votes
0answers
18 views

What should I amend in my current network infrastructure if I want to use Software defined perimeter [on hold]

I used to allow employees to connect to my remote access server through VPN. However after I learned about Software defined perimeter, I wanted to know how it will affect my current network ...
-1
votes
0answers
37 views

VPN suggestion for small office [on hold]

What would be cheapest, reliable, 2-way authenticate type, manageable with non-techie, VPN service for a small team of around seven which works in over all continents? Any suggestions please. Thanks,...
0
votes
2answers
97 views

How do we create more secure software when we already work with source code auditing tools like GitLab?

I’m interested to know how CIA, NSA and FBI secure their software when they’re developing a software. My company builds software and products based on c# .NET framework with rest API that communicates ...
0
votes
1answer
46 views

Does SSLSTRIP in MITMF only works when the victim visits for the first time?

I just started learning MITM attacks and I use MITMF to perfom these attacks. I have one question regarding to sslstrip. I notice that sslstrip only works when we first clear the cache and history in ...
0
votes
0answers
47 views

Can I change the router username and password provided by the ISP? [on hold]

When I tried logging into the interface of my router today, I noticed that it had the default username and password set. I want to change it given the obvious dangers it posed by exposing my home ...
1
vote
0answers
62 views

What are the risks involved in blindly trusting all certificates for https requests over unknown proxy servers?

My use case is a Java application where no sensitive data being transmitted whatsoever, and the response being accurate (i.e. unmodified) is unimportant.
0
votes
1answer
52 views

Isolate devices on the same network

I asked a similar question on this topic and some guys recommended use VLANs or guest network, so I asked to a friend and he will give to me a router with guest network function. However, there is a ...
1
vote
0answers
40 views

Does a browsers' vpn feature securely modify my ipv6 address?

If I use inbuilt vpn feature of a browser, does it modify my ipv6 address, making me safe as far as my mac address is concerned ? OS - Ubuntu 16.04. Browser - Opera
1
vote
0answers
70 views

How to prevent router identification [closed]

How to prevent my router (D-Link AC1200 LTE Router DW-953) which is using a 4G sim card for data from being identified by an ISP? The router has the current Firmware Version V01.02.3.045, with no VPN ...
2
votes
1answer
90 views

Why does Google 2FA not display the correct location when behind proxy?

I'm on my corporate proxy and using Google 2-factor authentication to log into my machine. When I get the notification on my phone, it says that I'm trying to connect from Moscow, Russia, even though ...
2
votes
0answers
70 views

Sniffing TCP packets using Wireshark

I am trying to reverse engineer a decoder. To do so I need to sniff the packets that the decoder receives from an Android application installed on my phone, this application is what controls the ...
2
votes
0answers
88 views

How to prevent a DHCP Starvation attack in a wireless network

Is there any way to prevent a DHCP Starvation attack when using a wireless network with anonymous users? Port security cannot be used since maxing the number of clients that can connect on a port ...
1
vote
0answers
61 views

What information for identification does a WiFi router get from a connecting device (Android)? What information can be spoofed?

When I want my device to connect to a WiFi router and make the router not recognize the device I have to change the MAC and the hostname. Is this right? And what information will also be usually ...
0
votes
1answer
57 views

What is the difference between probe and scan?

I'm struggling to understand the difference between probe and scan because they seem very similar. Does NMAP tool use probes and scans? Could you give a practical example to make the theoretical ...
0
votes
1answer
94 views

Layman's ways of dealing with network being hacked or breached? [on hold]

Without the need to go into any technical jargon, however method of attack and/or point of breach happened, would replacing the 2 in 1 modem/router used in the potential breached network with a ...
0
votes
0answers
51 views

Network Breach - Possibility

Hypothetically, if someone had unauthorized access to my network, there are a lot of things that can happen, depending on the point of attack and how it accessed, I can assume that anything that is ...
0
votes
1answer
50 views

What does “DECed” mean in Network Security?

As in this MIB documentation: http://www.circitor.fr/Mibs/Html/F/FORTINET-FORTIGATE-MIB.php#fgIpsAnomalyDetections fgIpsAnomalyDetections 1.3.6.1.4.1.12356.101.9.2.1.1.9 Number of intrusions DECed ...
0
votes
2answers
100 views

Is it expensive for ISPs to store browsing, text and call logs?

I couldn't really find this answer anywhere. If an ISP was to record every browsing, call and text we make/send, would it be expensive for them log and store this? Assume an ISP has 4 million devices ...
0
votes
1answer
129 views

Is my credit card information “wide open to hackers” without VPN?

I saw an ad for a vpn provider recently where they claimed that, without using a vpn, my credit card information is "wide open to hackers" while shopping on-line. I guess the implication here was that ...
0
votes
1answer
52 views

How would you characterize a cyber surface? [closed]

Thinking through a network boundary characterization, say firewall/IDS flux. How some activity may change profile of that surface.
1
vote
1answer
69 views

Separation of devices for VPN / Firewall [closed]

Our company has two separate firewall devices from different vendors (Checkpoint / Cisco) for firewall and VPN access. We're currently evaluating the possibility of migrating to a newer, clustered ...
5
votes
1answer
679 views

Is my router spying on my network traffic?

I got a new TP-Link router a couple months ago, and configured it to use the OpenDNS domain servers for basic content filtering across all household WiFi devices. Everything seemed to be great. ...
0
votes
0answers
37 views

VDSL modem getting probed?

My ZyXEL VMG8924-B30A VDSL modem recently had these alerts in its log. The WAN IP address of the modem is 10.225.205.128. There was nothing like this before 1 May. What is this? 2019 -05 -01 T16:05:...
-3
votes
1answer
79 views

if i send a mail on protonmail and close account straight away is it trackable [closed]

I sent an email via protonmail. I then closed my account. Can you trace my email from this?
0
votes
0answers
20 views

In Kerberos authentication protocol, why is the TGT encrypted using the user's key Ka?

When the user first logs in, he fetches his TGT from the KDC along with the session key. I get why Sa (session key) is encrypted with Ka (user's key). But why is TGT also encrypted with Ka. TGT is ...
0
votes
0answers
54 views

Best Practices for Securing a network for Developers?

Asking as a developer: There seems to be a lot of tension between what developers want/need and what the Security Team would like to have locked down at a lot of development shops. Approved ...
0
votes
0answers
27 views

standards reference to perimeter security

I have the following problematic that I am currently dealing with. I have two zones/perimeters that need to be interconnected, some standards protocols have to be whitelisted such as HTTP, FTP, SSH ...
0
votes
0answers
5 views

Microsoft Telemetry Data [migrated]

I work at a large company and started digging through firewall logs to get my head around the network and what is going on. I noticed a HUGE amount of traffic going to 72.21.81.240. I cross-correlated ...
-1
votes
0answers
156 views

DoS attack from remote server connected through VPN [on hold]

If my vendor network is connected to my remote access server through a VPN, how can a DoS attack occur? Stopping the remote access is out of the question as my vendor usually performs updates ...
1
vote
1answer
97 views

Is it possible to prevent man-in-the-middle attacks in token-based authenticated online games without packets encryption?

I'm creating a home made MMO server (as a hobby / way to learn something new). I've decided to use a token based authentication for game traffic. Many people say that you shouldn't use any kind of ...
0
votes
1answer
95 views

Is it safe to login using HTTP on a WPA2 protected home network?

I have a small network infrastructure in my home on which I'm hosting some services such as a website, file server and such. Many of those services have an administration web interface which isn't ...
-5
votes
0answers
35 views

How SWIFTNet Works

As a global provider of secure financial messaging services, SWIFT has its own network infrastructure to manage the security of their network traffic called SWIFTNet, how does SWIFTNet work?
3
votes
1answer
113 views

What is an Albert sensor?

Recent news articles have started to talk about government networks deploying "Albert sensors" (e.g., this article). What is an Albert sensor? And how effective is it? Going purely from context, it ...
0
votes
2answers
83 views

Security of next generation firewall

In recent years there's been a number of IndieGoGo or KickStarter projects for smart device protection, or next-generation firewalls. Some examples are: Anonabox, Cujo, Dojo, Firewalla, Keezel, ...
0
votes
2answers
136 views

How do I list IP addresses a system is connecting to from its memory dump or OS image (obtained from FTK Imager)? [closed]

I'm looking for a tool that will enumerate the IP addresses that a system is connecting to. This is mainly for forensic purposes, to gather IOCs. I know we can run a netstat on windows, but would like ...
0
votes
1answer
42 views

Network diagram based on Cisco ACL and other firewall rules [closed]

Are there any tools for automated building network diagram from ACL rules or any other firewall rules?
1
vote
1answer
52 views

Kerberos replay attack within allowed range - authenticator won't prevent it?

In kerberos protocol the client, after receiving a ticket to the TGS server, sends a request to the TGS and adds an authenticator to the request. What if an attacker performs a replay attack within ...
1
vote
1answer
168 views

How could the Chinese Communications Authority find a backdoor on my website?

I host a legacy HTTP website on my own hardware in China. It was attacked due to the Struts file upload flaw last month. But yesterday, Communications Authority in my province alarmed me, there is ...
-5
votes
1answer
215 views

Monitor SSL traffic at home

There is an underage guest in my house for whom I will be legally responsible for the next few months and I'm concerned about some of his interactions online from some of the public postings I've seen ...
0
votes
1answer
92 views

Can a PC without VPN expose the public IP of another PC with VPN on the same local network?

Computer 1 is surfing the internet while using a VPN and at the same time accesses files on computer 2 (this computer does not have VPN) on the same local network. Since computer 2 does not have a VPN ...
0
votes
2answers
104 views

Can a school monitor my school laptop? [duplicate]

So i'm on my school computer right now at home, and I was wondering, if i'm at home on my internet connection, can my school use their monitoring app (DyKnow) and see what i'm doing, from my wifi?
0
votes
1answer
53 views

Possible risks of multicast

I noticed that a android in my network is constantly connect to Multicast DNS IP. I seen this because my firewall block this inbound connection. Other devices connects to that IP too, but this android ...
0
votes
0answers
42 views

What ISP know about my local network when I use their ONU?

I have FTTP (Fibre to the Premises) and a GPON ONU given to me by my ISP. I know they can see hostnames and MAC of devices connected in ONU. If I connect my personal router to this ONU and then ...
1
vote
2answers
168 views

Firewalls vs DMZ

What's the difference between Firewalls and DMZs? These terms seem to overlap at time and I'm not clear on the difference. Maybe a DMZ is achieved using firewalls?
1
vote
1answer
140 views

Could my boyfriend be hiding his encrypted emails inside of my inbox? [closed]

is it possible that my boyfriend could be hiding his encrypted emails inside of my email inbox with my email address and I can't read them? And if it if that is possible is there way that I can ...
0
votes
0answers
55 views

Bad Connections Blocked

With a new Windows 10 computer, McAfee Livesafe is reporting nearly 20,000 bad connections blocked. I ran some tests from Gibson Research, including the UPnP Exposure Test and the All Port Scan. The ...
1
vote
0answers
29 views

Trouble connecting to LAN card (Lantronix Micro125) [closed]

I am having a tough time connecting to a LAN card (Lantronix Micro 125 'Embeded Device Server'). I can ping it, but the software I have to use to reset the card won't find it and the card doesn't show ...
-1
votes
1answer
103 views

Can employer see your posting content on a public site when using their network on their hardware [duplicate]

Can the employer identify you as the person that posted on a website (you logged onto the system using their computer) if the computer is replaced by a new one?
0
votes
1answer
145 views

How a computer can infect others devices on the same network?

As I said in this post, my father is very careless about online security. Besides what I already said on that post, yesterday I saw in his android that the permission to install of third-party apps ...
0
votes
1answer
42 views

Testing Network layer encryption enabled or not

I am new to network security. I have a requirement to test whether the network layer encryption is enabled or not. How do I test this requirement? Are there any automated tools available?