Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

0
votes
0answers
33 views

How do I allow for anonymous encryption?

I have a protocol I am designing that requires anonymity and privacy. My idea is to have a minimum number of hops in the network before the message can be sent to its intended destination. The ...
1
vote
0answers
34 views

A local IP address (RFC 1918) on my network that is not … local ..

I've noticed an IP address today on my network (192.168.15.1) which when visited actually goes to a page that has a router webconfig page (Not my router) The puzzling thing is that i tried traceroute ...
1
vote
1answer
47 views

Updating privacy/security-concerned applications

Lets say we have a decentralized open source p2p chat client meant for secure communication. The main attack vector seems to be the (centralized) update mechanism. What methods and/or techniques can ...
-5
votes
0answers
43 views

Information Security on a network [on hold]

You are an IT Security administrator in a banking organization. Your organization hired an outside IT firm to do a proof of Concept for new equipment which is a computer based system. This equipment ...
-6
votes
0answers
52 views

What's the best way to connect to a computer via IP address? [on hold]

I'd like to know a valid,working method which allows me to connect to any computers if I know their IP address.
1
vote
1answer
26 views

Security issues with multiple interfaces

Say I have a server with multiple interfaces. I wish to configure each interface as different IP addresses (and host name). Is it advisable, on a security standpoint, to do that? I have an application ...
-2
votes
0answers
38 views

Most secure router to buy for my home? [on hold]

I want to buy a new router for my home, because mine is given by my ISP and i'm sure it's a security shame. What I need is a router that possibly can run a custom or, lets say, open firmware, so I get ...
4
votes
1answer
100 views

Accessing user accounts without asking for their password

I don't like asking my (windows network) users for their passwords, it doesn't seem like a good security practice. I also want to train my users to never give their password to anyone if they ask for ...
0
votes
0answers
60 views

Information Security classification [on hold]

I've been interested in IT security for a bit (~1 year) and had a bit of experience with NSM as well as web security. I want to have an overview of the entire industry, with all relevant niches and ...
0
votes
1answer
45 views

Socket timeouts and DDOS [on hold]

I have a question about socket timeouts in TCP. If by doing a certain request to a server a client's socket is timed-out, can there be a security vulnerability ? Is a timeout synonymous to the ...
1
vote
0answers
31 views

Snort alerts analysis (web interface) [on hold]

I have a question about Snort (or maybe any other IDS/IPS, any working solutions would be ok). The goal is to set up some web interface providing a way to view the whole TCP stream packets of each ...
2
votes
0answers
24 views

How to check SSL connectivity between certificates installed on two different server [migrated]

Suppose there are two organizations which share information with each other. Every organization installs SSL certificate in their application server and provides the same certificate to other ...
-2
votes
1answer
55 views

Stuxnet - The background functions [closed]

Stuxnet was a clever worm that aimed to malfunction programmable logic controllers on nuclear networks (Iran was the most affected). Nuclear networks were private networks, not supported on Internet ...
0
votes
0answers
11 views

Does NDP (Neighbor Discovery Protocol) reduce ARP (Address Resolution Protocol) attacks?

I read the comparison of NDP with ARP but am uncertain if NDP does reduce any amounts of ARP attacks, given that with NDP, ARP is not used for address resolution. For the discussion to be specific, ...
-5
votes
0answers
35 views

Moving through the network [closed]

I want to keep it short. Windows had made it "Out of the box" and your are safe . I mean to say we don't need a OS hardening (for the general small office and home users). When a single machine is ...
1
vote
1answer
105 views

Is using Chromecast “a security nightmare”?

I'd like to use Chromecast on our office network. Doing so requires enabling UPnP (Universal Plug and Play). A quick search turns up statements like this: The US Department of Homeland Security ...
-2
votes
0answers
15 views

How to assign my machine static IP of a different VLAN [migrated]

Imagine a user is on VLAN1 that dynamically gets an IP, and there is a VLAN2 that the users on VLAN1 cannot access. Is there a way to assign the machine of user on VLAN1 an static IP in the range of ...
1
vote
0answers
42 views

ARP poisoning question

I'm writing a program that detects ARP poiosoning. My question is: How can I b sure my LAN hasn't been poisoned? Yes, I can use my settings and find the IP address of the default gateway and yes I ...
0
votes
0answers
19 views

Storing LVM encryption key on network share [migrated]

I want to encrypt all my LVM LV's and have them automatically unlocked on boot using a keyfile available on my network. I can make the files available by SMB, NFS, HTTPS, etc. I have Ubuntu Server ...
2
votes
1answer
126 views

TLS 1.3 Makes Security Tools Obsolete?

I am a student and relative noob in IT security performing research for three reasons: school, my employer and personal curiosity, and I hoped maybe someone could answer a question for me. In a video ...
-2
votes
1answer
72 views

How do bits transefer over wire? [closed]

i was tackling with networking and cannot seem to understand How bits are transferred over wires in the first place what counts for each of 0's & 1's
1
vote
1answer
30 views

Belkin wifi netcam cloud storage [closed]

If my net/router turns off with the belkin netcam will i still receive video if the motion sensor is activated? I was considering purchasing one, but if all that needs to be done is simply turning off ...
0
votes
1answer
42 views

Setting up a secure Ad-Hoc network

I am taking my laptop with me on a school bus trip, and I want to use an Ad-Hoc network to host a multiplayer Minecraft server. I have heard, however, that Ad-Hoc networks have a vulnerability that ...
0
votes
2answers
72 views

Inspecting every packet leaving the system for sensitive information ? [closed]

Is there a way to check every packet leaving the system for sensitive data like IP addresses, personal information (like logins) etc ? A free (and preferably open source) program which does this for ...
-4
votes
1answer
27 views

What is the most secure way to protect a custom CMS from infiltration? [closed]

I have a custom CMS with a randomly generated ASCII 100-character string from this site for both my username/password. I also have this following sha512 encryption system, which was created by ...
1
vote
0answers
23 views

Is a direct SIP video call (encrypted) between two computers more secure than going through a registrar service?

I learned recently about ZRTP-encrypted video calls using an SIP client, such as Jitsi or Linphone or Blink. I was able to make a direct encrypted video call between two clients on the same local ...
2
votes
0answers
127 views

Is my server being used as a proxy or being attacked?

I have an Ubuntu, Apache, Passenger, and Rails 4 project on AWS EC2. I am a beginner full stack developer and am unfamiliar with the security and server side of my project. Recently, my site was ...
1
vote
1answer
42 views

Secure point to point remote access to NAS drive

This question is very similar but also distinctly different (How do I ensure data encryption on Samba transmission on *NIX systems?) I'm looking to set up remote access to a NAS unit locally sharing ...
1
vote
2answers
112 views

Is VPN the best solution against man-in-the-middle attack? [closed]

I'm looking for the best way to protect my enterprise against man in the middle attacks, because a lot of people connect to the same network. So I was thinking of creating a VPN. Is this really the ...
6
votes
2answers
393 views

What does a Firewall mean by “connect to TCP port without your permission”?

McAfee is reporting incoming network connections blocked from IPs like 198.252.206.149 (StackExchange Inc.), 54.179.231.116 (Amazon Technologies Inc.), 74.125.68.106 (Google Inc.), etc. The ports ...
2
votes
1answer
123 views

Understanding OpenWRT LuCI Firewall Routing with VPN

I'm still fairly new to networking, and I'm having a little trouble grasping some concepts of the proper firewall rules I need to implement for my desired setup. I'm setting up a router with OpenWRT ...
0
votes
1answer
67 views

Does VPN remote port forwarding compromise the anonymity of the VPN user?

An anonymous VPN service will typically assign the same public IP address to many VPN users. This procedure ensures that a connection cannot be traced back to the VPN subscriber: behind the veil of ...
2
votes
0answers
36 views

How to design a right VPN connection for an organisation (Interconnected MPLS link or Individual FW)

Thanks in advance for your advice We have to implement VPN connection for nearly 7 countries Option 1 : As we have private MPLS link to all 7 countries. It is been outsourced Third party. They ...
-1
votes
0answers
9 views

Know username who is working on remote desktop [migrated]

We are a team of 20 people we have a machine that is used by everyone. We take remote desktop of that machine to work on. so if somebody is working and i want to take that i have to ask everyone in ...
4
votes
1answer
54 views

Security risk: Digitally sign communications for SMB

I have a computer (Windows) on a network where an industrial process is controlled. There is an option in Local Security Policy >> Local Policies >> Security Options >> "Microsoft network client: ...
-1
votes
0answers
71 views

How can I tell if someone is intercepting my cell phone signal using mobile signal tracking software?

I've been having many issues with my cellphone such as bad signal, dropped calls, spoofing, jamming, battery temperature over 115℉, can't make calls, not receiving or being received calls, and more. ...
-2
votes
0answers
42 views

What is the mechanism used by the ISP to avoid DoS attacks? [duplicate]

What is the mechanism used in the public networks or home networks to avoid DDoS or DoS attacks? How secure they are maintained by their ISP's.
-4
votes
2answers
41 views

How to hide my surfing history [closed]

I am on work network, installed and am using chrome without admin rights. how can i hide my surfing from netadmin, and if not then how can i link my home pc with work access and surf without any care? ...
0
votes
4answers
174 views

Help understanding VPN

I've been reading about VPNs lately, and I'm struggling to understand what they do and how they're essential components to upholding anonymity online. The basic idea I have is that a VPN allows two ...
-1
votes
2answers
39 views

How can I detect mode interface of other machine is promiscuous [closed]

I have a project that is to protect my box from attack man in the middle arp poison. I should detect if interface mode of other machine is promiscuous. I must write script python or command linux.
0
votes
0answers
10 views

Impact on Network printers which the SSL certificates are expired? [duplicate]

Any one please help me on what is the impact of network printers which the SSL certificate is expired also need to know whether we can remotely renew the certificate from another location??
0
votes
1answer
119 views

Router detecting constant ack flood attacks and port scans

I first noticed this yesterday in my logs - while I was configuring the router settings, so I don't know how long it's been going on. What should I do? I reconfigured my router with more secure ...
1
vote
0answers
47 views

How can I launch DHCP starvation attack in WLAN?

In WLAN, due to MAC association on Access Point (AP), I can't send the DHCPDISCOVER messages using random MAC addresses. But if I keep my original MAC address as the source ethernet MAC a and random ...
1
vote
1answer
48 views

Segregating a Printer in my Enterprise Network

I have a EAP-TLS network at home which I've managed for some time now. I just got a new Brother HL-5470 printer so I can finally print things at home, which is really nice. The only problem is that ...
1
vote
1answer
80 views

How to properly test that an OpenVPN connection is secured?

I have a router (ASUS RT-AC66U) with an embedded OpenVPN server. I'm able to successfully connect to the OpenVPN on the router, as well as, access internal services in my home network; However, ...
1
vote
1answer
88 views

Is End to End encryption possible for all servers across the whole infrastructure?

Running into a possible situation where a client I am working with is requesting that all data that leaves the servers should be encrypted and here, we are talking of hundreds of Linux servers ...
2
votes
1answer
91 views

Is it common for all hard / USB drives to be accessible to everyone on a network?

Every PC can map to any other PC's hard drive(s) / USB drive(s) on the network where I work. When I realized this I thought it was odd. All one needs to do is access the (Start) button then type ...
11
votes
4answers
3k views

How to prevent network administrators from accessing USB drive

How can I prevent network administrators from accessing, mapping to etc. a USB drive that's in a PC on their network? I'm mainly concerned about files being edited or deleted.
2
votes
0answers
100 views

Performing an airport scan on my Mac for available WiFi networks pulls up multiple SSID with different mac address. What's going on?

I performed the following command to search for available WiFi networks in my apartment complex: /System/Library/PrivateFrameworks/Apple80211.framework/Versions/A/Resources/airport scan | grep OBC I ...
0
votes
1answer
41 views

Is it possible to bypass sniffing when using port mirroring?

INTERNET <-A-> ROUTER <-B-> PC Let's theoretically think we mirror the port on a ROUTER to a file. So the full network traffic on it. Question: is it possible to still have ...