Introduction to Network Security

Question 1

Define vulnerability

Answer 1

weakness in the network or its protocol

Question 2

Define threat

Answer 2

set of circumstances that has the potential to cause harm

Question 3

define intrusion

Answer 3

an act or event that compromises the information on a network

Question 4

define breach

Answer 4

a breakdown of the security of a network

Question 5

What are the 5 intrusion types? Give an example of each

Answer 5

Interruption - DoS
Interception - Eavesdropping
Modification - Man in the Middle
Fabrication - Malware
Invasion - Session Hijacking

Question 6

What are the levels or phases of intrusion?

Answer 6

Level 0 - no intrusion
Level 1 - Intrusion occurs, no trail
Level 2 - Intrusion occurs, no damage, trail is left
Level 3 - Files are damaged and data is altered
Level 4 - Services are disrupted
Level 5 - Valuable information is stolen espionage and felony

Question 7

What is an example of an IP address finder

Answer 7

NSLOOKUP/DIG

sends queries to dns about networks and extracts the IP address blocks assigned to a particular network

Question 8

What is an example web server information gatherer

Answer 8

Netcraft

Web based tool that lists information such as the type and version of web server, geo location, last update

Question 9

What is an example of an IP address tracer?

Answer 9

traceroute, tracert, visualroute
Tools that use ICMP packets to trace the route to a destination host. The hostname, IP address, and the round trip time to each intermediate node are listed

Question 10

What is an example of an IP location finder?

Answer 10

iplocation.net

Determines the geo location of an IP address

Question 11

What is an example of a port scanner ++

Answer 11

nmap, zenmap
Determines what hosts are available on the network what services those hosts are offering, and what OD versions they are running, what type of packet filters/firewalls are in use, etc

Question 12

What is an example of a port scanner?

Answer 12

Angry IP Scanner
Cross platform, lightweight, and very fast IP and port scanner; Can scan an IP address in any range or any of their ports

Question 13

What is an example of traffic monitoring?

Answer 13

Wireshark

Captures every frame that passes on its network, allowing analysis of the captured fram

Question 14

What is an example of traffic monitoring?

Answer 14

TCPDump

Unix based network sniffer/analyzer

Question 15

What is an example of a wireless network information gatherer (Active sniffer)

Answer 15

Netstumbler
enables wireless network information gathering. displays MAC address of the access point, their names, channel numbers, vendors, whether security is enabled or not, and signal to noise ratio.

Question 16

What is an example of a wireless network information gatherer (Passive sniffer)

Answer 16

Kismet
Wireless network detector, sniffer, and intrusion detection system. Can even decloak hidden networks that have turned off SSID beaconing KisMAC is the Mac version

Question 17

What are some tools for vulnerability testing?

Answer 17

NESSUS
Nexpose
GFLIANguard Network Security Scanner
NIKTO
Nipper Studio

Question 18

What are some tools for gaining access?

Answer 18

Brute force
Password crackers
Keyloggers
Address Spoofers

Question 19

What are some tools and techniques used by hackers for launching attacks?

Answer 19

DoS
Man in the Middle Attack
Data Modification
Replay Attack
Injection of Malicious Code

Question 20

What are some “other” attack tool categories?

Answer 20

Binders and cryters
Bots
FB hacking tools
GMail hacking tools
Mail bombers
Mobile hacking tools
Virus creator
Website hacking tools

Question 21

What is the crux of secure network design?

Answer 21

Protect your network and protect your transaction

Question 22

List the 7 security goals and what they mean

Answer 22

Confidentiality - no eavesdropping
Integrity - message received = message sent
Authentication - sender validation
Non-repudiation - source must not be able to deny a transaction
Certification - third party certifies this source as good
_____the above can be achieved via cryptography

Access control - who can access what and when
Availability - system resources are always available for legitimate users
These can be achieved by Firewall