Network Attack & Defense - Revision history

213.54.193.112: /* network attacks */

2005-01-28T21:31:03Z

network attacks

← Older revision		Revision as of 21:31, 28 January 2005
Line 81:		Line 81:
	** using safety gaps in programs, those on the attacked computer runs (e.g. Web Browser)		** using safety gaps in programs, those on the attacked computer runs (e.g. Web Browser)
	** weak passwords		** weak passwords


			* more in http://www.computec.ch/dokumente/allgemein/angriffsmoeglichkeiten_auf_netzwerke/angriffsmoeglichkeiten_auf_netzwerke.pdf

213.54.193.112 at 21:28, 28 January 2005

2005-01-28T21:28:55Z

← Older revision		Revision as of 21:28, 28 January 2005
Line 37:		Line 37:
	of serious safety gaps. They maintain the internet in a half		of serious safety gaps. They maintain the internet in a half
	hour to paralyze to be able.		hour to paralyze to be able.


	==network attacks==		==network attacks==

	'''overview'''		'''overview'''
	* '''term clarifying'''		* '''term clarifying'''
Line 104:		Line 102:

	'''with attention of these measures is avoidable over 99% all "Hacks"!'''		'''with attention of these measures is avoidable over 99% all "Hacks"!'''


	==network analysis==		==network analysis==

	* data security consider!		* data security consider!
	* only within the own range permits!		* only within the own range permits!
Line 124:		Line 120:
	** network monitorings receive		** network monitorings receive
	*** monitoring and analysis of connections		*** monitoring and analysis of connections


	==port-scans==		==port-scans==

	* in principle: each program on a computer, which is to accept connections from the outside, must open a haven before (status: Listening)		* in principle: each program on a computer, which is to accept connections from the outside, must open a haven before (status: Listening)
	* open ones of haven can be recognized		* open ones of haven can be recognized
Line 147:		Line 141:

	==computer analysis - nessus==		==computer analysis - nessus==

	* reaction of a computer when responding a port		* reaction of a computer when responding a port
	* OS finger prints		* OS finger prints
Line 175:		Line 168:

	*'''Negative result does not mean that the computer is safe!'''		*'''Negative result does not mean that the computer is safe!'''


	==summary==		==summary==

	*'''there is no chance to be save'''		*'''there is no chance to be save'''

Line 184:		Line 175:

	==references==		==references==

	* http://www.computec.ch/dokumente/allgemein/angriffsmoeglichkeiten_auf_netzwerke/angriffsmoeglichkeiten_auf_netzwerke.pdf		* http://www.computec.ch/dokumente/allgemein/angriffsmoeglichkeiten_auf_netzwerke/angriffsmoeglichkeiten_auf_netzwerke.pdf
	* http://www.telematik-institut.de/publikationen/online-vorlesungen/weitere_vorlesungen_und_skripte/SION-kap-3.4.pdf		* http://www.telematik-institut.de/publikationen/online-vorlesungen/weitere_vorlesungen_und_skripte/SION-kap-3.4.pdf

213.54.193.112: /* port-scans */

2005-01-28T21:28:01Z

port-scans

← Older revision		Revision as of 21:28, 28 January 2005
Line 124:		Line 124:
	** network monitorings receive		** network monitorings receive
	*** monitoring and analysis of connections		*** monitoring and analysis of connections


	==port-scans==		==port-scans==
Line 144:		Line 145:
	** interesting are doubtful haven with status "LISTENING"		** interesting are doubtful haven with status "LISTENING"
	* local analysis potentially compromised computer		* local analysis potentially compromised computer


	==computer analysis - nessus==		==computer analysis - nessus==

213.54.193.112: /* network analysis */

2005-01-28T21:27:42Z

network analysis

← Older revision		Revision as of 21:27, 28 January 2005
Line 104:		Line 104:

	'''with attention of these measures is avoidable over 99% all "Hacks"!'''		'''with attention of these measures is avoidable over 99% all "Hacks"!'''


	==network analysis==		==network analysis==

213.54.193.112: /* network attacks */

2005-01-28T21:27:21Z

network attacks

@@ Line 105: / Line 105: @@
 '''with attention of these measures is avoidable over 99% all "Hacks"!'''
-* '''network analysis'''
+==network analysis==
 ==port-scans==

213.54.193.112: /* network attack & defense */

2005-01-28T21:26:20Z

network attack & defense

← Older revision		Revision as of 21:26, 28 January 2005
Line 1:		Line 1:
			==overview==
	==network attack & defense==

	* introduction		* introduction
Line 8:		Line 8:
	* summary		* summary
	* references		* references


	==introduction==		==introduction==

213.54.193.112: /* summary */

2005-01-28T21:25:40Z

summary

← Older revision		Revision as of 21:25, 28 January 2005
Line 175:		Line 175:

	*'''Negative result does not mean that the computer is safe!'''		*'''Negative result does not mean that the computer is safe!'''


	==summary==		==summary==

213.54.193.112: /* computer analysis - nessus */

2005-01-28T21:25:22Z

computer analysis - nessus

← Older revision		Revision as of 21:25, 28 January 2005
Line 144:		Line 144:
	** interesting are doubtful haven with status "LISTENING"		** interesting are doubtful haven with status "LISTENING"
	* local analysis potentially compromised computer		* local analysis potentially compromised computer


	==computer analysis - nessus==		==computer analysis - nessus==

213.54.193.112: /* computer analysis - nessus */

2005-01-28T21:24:24Z

computer analysis - nessus

← Older revision		Revision as of 21:24, 28 January 2005
Line 147:		Line 147:
	==computer analysis - nessus==		==computer analysis - nessus==

	* reaction of a computer when responding a ~~haven~~		* reaction of a computer when responding a port
	* OS finger prints		* OS finger prints
	* analysis of weak points (missing Patches/unsatisfactory configuration)		* analysis of weak points (missing Patches/unsatisfactory configuration)
	*with what?		* with what?


Line 172:		Line 172:
	** comparison to earlier results or same computer configuration verifies classification of importance possible and meaningfully		** comparison to earlier results or same computer configuration verifies classification of importance possible and meaningfully


	'''Negative result does not mean that the computer is safe!'''		*'''Negative result does not mean that the computer is safe!'''

	==summary==		==summary==

213.54.193.112 at 21:23, 28 January 2005

2005-01-28T21:23:35Z

← Older revision		Revision as of 21:23, 28 January 2005
Line 145:		Line 145:
	* local analysis potentially compromised computer		* local analysis potentially compromised computer

	==computer analysis==		==computer analysis - nessus==

	* reaction of a computer when responding a haven		* reaction of a computer when responding a haven
Line 152:		Line 152:
	*with what?		*with what?

	==nessus==

	* freeware scanner NESSUS (http://www.nessus.org)		*'''freeware scanner NESSUS (http://www.nessus.org)'''
	** two-piece:		** two-piece:
	*** server ("Daemon") on Unix		*** server ("Daemon") on Unix
Line 164:		Line 163:
	** NESSUS scans not only the system to open ports, it tries also, dependent on the selected scanmethod, to recognize existing weak points of the individual server services		** NESSUS scans not only the system to open ports, it tries also, dependent on the selected scanmethod, to recognize existing weak points of the individual server services
	** with the option "intensively" attacks on the target computer are implemented, which can lead also to system crashes		** with the option "intensively" attacks on the target computer are implemented, which can lead also to system crashes


			*'''evaluation of the Nessus results:'''
			** doubtful
			** knowledge about scanned computers is necessary
			** often false alarm, results
			** results can be stored in data base
			** comparison to earlier results or same computer configuration verifies classification of importance possible and meaningfully

			'''Negative result does not mean that the computer is safe!'''

	==summary==		==summary==