Network Security - securing network infrastructure and connections

learn more… | top users | synonyms

-1
votes
2answers
88 views

Determining Firewall settings (Ports, etc) for specific applications

How can we identify the network or network firewall requirements for a Desktop or Web application. Meaning what ports are required by the applications. How the Cloud and non Cloud networks communicate ...
1
vote
0answers
15 views

Where can i find information about Ipsec Xfrm framework?

I have searched online and found very little information about the ipsec xfrm framework, including the book Networking implementation and Theory.. Where can i get more information about xfrm ...
1
vote
2answers
144 views

A question about arpspoof command

The arpspoof command will spoof default_router_ip's MAC address on all victims in the subnet arpspoof -i <NIC> <default_router_ip> How does it fool the router about the MAC addresses ...
1
vote
1answer
76 views

is it possible to intercept network packets outside lan?

User A is in a different country than user B and they have different IP ranges and ISPs. Is it possible for A to intercept B's communication sent to a third party, without using techniques like ...
2
votes
1answer
46 views

Is a “standalone WPS server” possible?

Wi-Fi Protected Setup (WPS) is a network security standard to create a secure wireless home network. It aims at simplifying the enrollment of WiFi devices in a WiFi network (via a PIN, a ...
2
votes
1answer
73 views

Linux (!) Network Architecture for CTF-scenario [closed]

My boss recently enrolled me in an InfoSec training. I am part of the network team, but have limited experience in InfoSec. My first assignment is to draw a layout of a network that will be used ...
60
votes
4answers
6k views

Why should servers be placed outside of the corporate network?

In an answer to How do you deal with massive port scans?, user tylerl said: ... And you, like a wise IT admin, run all your servers elsewhere on the internet, not inside your corp network, for a ...
0
votes
0answers
161 views

Isolating Computer on Home Network Using Multiple Routers

My goal is to isolate a computer on my home network. This computer (a rapsberry pi) should be considered untrusted and is accessible from the internet (port 22). I need a solution that will prevent ...
27
votes
4answers
4k views

How do you deal with massive port scans?

This morning I was looking through firewall logs and saw there were about 500 packets marked as port scan. The scanning range was from 1000-1200 5000-5200. The IP address is 85.25.217.47 which seems ...
1
vote
1answer
81 views

Would you typically want to monitor all ports for NIDS monitoring? If so, is span port or network tap the way to go?

We're setting up NIDS monitoring and the bosses want to monitor all the ports, but I'm wondering if this actually makes sense. The switch we're currently using can only mirror 4 source ports to one ...
3
votes
1answer
68 views

Can still ping from secure network?

I have a standard network and wanted to make a more secure one so I bought a second router and set it up as a separate network daisy chained so it can get internet. I managed to make the setup, with ...
1
vote
4answers
157 views

Which of the TLS/SSL and IPsec protocols is effective?

Which of those two protocols is the most effective for sending data from a client to a server on a local network (knowing that I aim to use it for FTP traffic)?
2
votes
1answer
123 views

Linux responds to ARP requests for other interfaces - could this be a security vulnerability?

Linux responds to ARP requests on all interfaces by default. To explain, say you have this setup: Client 1 ---> [eth1] server [eth0] <--- Client 2 And the server's eth1 IP is 192.168.1.1 and ...
1
vote
3answers
263 views

How can I find an unauthorized/unknown proxy on my home network?

I recently started receiving an error while trying to stream netflix that I'm using a proxy. Exactly this error code here: https://help.netflix.com/en/node/277?ba=GSButtonClick&q= My problem is ...
-3
votes
4answers
338 views

Is it possible to hack a single computer without injecting a payload or a virus? [closed]

I know the ways to hack a computer or a mobile phone by injecting payload using some exploits with metasploit. We can inject a exe, or we can use pdf file, or docx file as I know. I wonder the ...
0
votes
0answers
26 views

airbase-ng: How to apply `iptables` rule to packets on `at0` tap-interface

airbase-ng: How to apply iptables rule to packets on at0 tap-interface Reading a tutorial on the net, I see this iptables command used with the tap-interface at0, created by airbase-ng. iptables ...
0
votes
2answers
169 views

Computer Security vs Privacy

Probably this is a redundent post but in fact I have been searching online about a precise clear distinction between computer security and privacy. I'd like to know the difference of between them ...
0
votes
2answers
152 views

Beginner > Medium > Advanced Books/Guides/Tutorials on TCP/IP [closed]

Long time web developer looking to get into infosec. Was hoping on guidance on material from a beginners stance on TCP/IP and hopefully "networks". I realise the massive generalisation I'm making but ...
3
votes
1answer
78 views

How can I view images in forwarded packets on (current) Mac OS X?

How can I view reassembled images on a Mac being used as a router? I'd like to do this as a demonstration of how HTTP doesn't provide privacy. I've done some research, and on Linux there's a tool ...
4
votes
3answers
264 views

How does a Man In the Middle attack happen in reality

I am trying to improve the MITM protection of an iOS app I am responsible for, so I want to understand exactly how it happens. I have set up Charles to act as a proxy which required setting the proxy ...
4
votes
1answer
204 views

Pros and cons of disabling TCP timestamps

So, lynis informs me that I should unset net.ipv4.tcp_timestamps. I know that's a bad thing because an attacker could figure out which updates that require restarting the machine I haven't applied, or ...
0
votes
0answers
38 views

Is the OS the exclusive “owner” of the network traffic?

I boot up a fresh OpenBSD on a notebook. The notebook has an ethernet port and a wireless card. Does all the traffic on the ethernet and wireless goes through the OS? So if I shut down the ...
1
vote
2answers
294 views

How to route all traffic through TOR?

I have TOR setup on my macbook and I configured my wifi connection to use TOR's SOCKS Proxy that is running on port 9050. When I check my connection it confirms I am browsing through TOR. However, ...
4
votes
1answer
123 views

Evil Twin attack: How to make client send WPA2-PSK password when asked for AP-password? [closed]

How can an Evil Twin attack be set up, so that the client will be prompted for a password and send it in plain text? Is the above even possible? I have already set up the fake AP, but it must be ...
-3
votes
2answers
90 views

Defense in depth

How is defense in depth strategy different from network security policy? What is the need to name it a "Defense In Depth", although you may simply name it "Network security policy"? Secondly if DID ...
0
votes
1answer
59 views

Is it safe to host passwordless web applications/software with web GUI in Virtual Machines

I have a Linux Mint Virtual Machine which I use quite a lot with my Windows host. I have lots of Software installed there (mostly with web GUI so I can access them from host easily). So I am ...
-1
votes
1answer
51 views

Eavesdropping and sniffing attacks [closed]

Assume we have two routers connected by a link. Speaking of eavesdropping and sniffing attacks, does it technically appear at link itself or at the routers? If at the routers, does it imply that these ...
3
votes
0answers
230 views

Security for Hospital IT

I'm developing a program in Java intended to be utilized in a hospital. The system uses RMI internally between workstations and the server program. The program would be installed on the hospital's ...
0
votes
1answer
93 views

Hiding using VPN

I have just connected to a vpn server in my University using Cisco AnyConnect. But when I check http://whatismyipaddress.com/, it still says that I'm in the same country as before I connected to the ...
1
vote
2answers
89 views

Understanding the behaviour of existing eavesdropping techniques

I am studying the behaviour of existing eavesdropping techniques (part of my research). I have a question through the following scenario: Suppose Bob lives in New York and wants to listen (i.e. ...
-1
votes
1answer
108 views

Which method is the best for IDS : heuristic or signature based? [closed]

In signature based IDS: it maintains a database of the signatures that might signal a particular type of the attack. Problems: New attack that has been specifically constructed in order to not ...
-4
votes
1answer
47 views

Using stingray against police (idea) [closed]

This is focusing on UK mainly, where police radios are similar to mobile phones. Pretend it's possible to buy Stingray, the IMSI scanner. Pretend Jimmy is a criminal, waiting for a police raid at any ...
0
votes
0answers
16 views

Using Digital Signatures in isolated networks

Is it possible to use Digital signatures in isolated environments which do not have access to internet and work only on internal network. How does the certificate authentication happen in such case
1
vote
4answers
278 views

My email hacked

Someone has definitely gained access to two of my alternate emails. I know this by looking at the login activity. By looking at the email logs I discovered that the IP that is always gaining entry to ...
0
votes
1answer
140 views

A seemingly innocent program is attempting to connect online. Should I be worried?

OS: Windows 10 64-bit updated, usually used for development and Steam-CSGO. Straight to the point: Solitaire just tried to connect to the internet. Details: After tightening my firewall rules after ...
0
votes
0answers
21 views

What stops a man in the middle attack from intercepting SSL encrypted data and sending it with a spoofed ip address to the server? [duplicate]

Say you have a client that connects to a server using SSL. The server, upon receiving a certain command, launches a missile. Then say there's someone in the middle of the connection listening to the ...
0
votes
1answer
118 views

How to secure wireless (Wi-Fi) home network [closed]

What are the countermeasures to make home wireless network secure, which will both prevent others from stealing internet and will also prevent hackers from taking control of computers through your own ...
3
votes
1answer
62 views

Blocking all incoming traffic, will it still accept a response from a request I initiated?

I am a 'newbie' when it comes to firewalls, but I am trying to launch some machines that will connect to Facebook's Graphs API. I only want these machines to contact Facebook and nothing else. By this ...
1
vote
3answers
140 views

Why limit internet access while connected to a remote desktop?

I work in the nuclear industry, and sometimes we have some strange (but understandable) standards for information security. I have encountered one which seems odd and would like to know the potential ...
4
votes
1answer
105 views

Is it good idea to use a access point MAC address as wifi password?

I realized that one network I'm connecting with is using a MAC address of one of its interfaces. If an attacker would know that fact, could he somehow obtain the MAC address wirelessly and break ...
2
votes
0answers
27 views

Reasonable means of security in commercial dealings [closed]

I am writing a paper from a legal standpoint and I'm suggesting legislation for a new duty of care for private companies in the safeguarding of customer's personal information. This will not apply to ...
1
vote
1answer
60 views

MitM attempt resulting in ICMP redirects

I am trying to 'man in the middle' a device on my wifi network. I have configured it to use my Linux machine (also in the wifi network) as a default gateway. On the Linux (attack) host, I switched on ...
1
vote
1answer
49 views

Is Windows 10 [Password protection on wakeup] set to 'Required' relevant when machine is asleep?

I like to just hit the spacebar and have the machine ready without the extra fuss (many times a day.) No one untrusted has physical access to the machine, but it wakes up at ~3am and does updates and ...
5
votes
3answers
136 views

Full Disk Encryption and Network security

I very recently had a job interview in which the interviewer asked me how full disk encryption helped improve network security? Initially I believe they are seperate and not linked, FDE is local to ...
0
votes
3answers
126 views

Is it possible to obtain the WPA key of a wireless network while connected to it with an Ethernet cable?

I know that there are ways to view saved WPA keys, but I am trying to figure out how to get the WPA key of an access point while connected to the same domain over Ethernet. Also, what if the router ...
3
votes
2answers
148 views

Preventing man in middle attack (LAN)

I am working on a local area chat application which would simply establish connection between two sockets on the LAN and proceed with communication. Now focusing on security, my main concern is to ...
-4
votes
1answer
96 views

How to stop ip hacking? [closed]

Some people I met in a chat room about 2 months ago hacked me and have been stalking me and sending me stupid messages ever since. I've recently formatted my computer (December 22) in an attempt to ...
13
votes
2answers
3k views

Is this a secure data exchange scheme for a game?

I am writing a multiplayer game. I have a central server which processes everything. For data exchange I use HTTPS protocol. Because this is a game I cannot use computationally expensive systems like ...
1
vote
3answers
132 views

Is there a way to isolate every device on my network?

As it is every device on my network and every app on those devices could be hacking my other devices on my network. The app I just downloaded to my iPhone might be looking for known exploits in my ...
2
votes
1answer
67 views

Wired Deauth-Like Attacks

[story] Good Evening Guys, I just got out of a lan house which uses a system named Geto (Geto Lan House Management System 4.0), and I was wondering if it is hackable. [/story] While searching for ...