HACK I.T.
TABLE OF CONTENTS CHAPTER 1: INTRODUCTION TO COMPUTER SECURITY INTRODUCTION HOW SERIOUSLY SHOULD YOU TAKE THREATS TO NETWORK SECURITY? IDENTIFYING TYPES OF THREATS MALWARE COMPROMISING SYSTEM SECURITY DOS ATTACKS WEB ATTACKS SESSION HIJACKING INSIDER THREATS DNS POISONING NEW ATTACKS ASSESSING THE LIKELIHOOD OF AN ATTACK ON YOUR NETWORK BASIC SECURITY TERMINOLOGY HACKER SLANG PROFESSIONAL TERMS CONCEPTS AND APPROACHES HOW DO LEGAL ISSUES IMPACT NETWORK SECURITY? ONLINE SECURITY RESOURCES CERT MICROSOFT SECURITY ADVISOR F-SECURE SANS INSTITUTE SUMMARY TEST YOUR SKILLS CHAPTER 2: NETWORKS AND THE INTERNET INTRODUCTION NETWORK BASICS THE PHYSICAL CONNECTION: LOCAL NETWORKS FASTER CONNECTION SPEEDS WIRELESS BLUETOOTH OTHER WIRELESS PROTOCOLS DATA TRANSMISSION HOW THE INTERNET WORKS IP ADDRESSES UNIFORM RESOURCE LOCATORS WHAT IS A PACKET? BASIC COMMUNICATIONS HISTORY OF THE INTERNET BASIC NETWORK UTILITIES IPCONFIG PING TRACERT NETSTAT NSLOOKUP ARP ROUTE OTHER NETWORK DEVICES ADVANCED NETWORK COMMUNICATIONS TOPICS THE OSI MODEL MEDIA ACCESS CONTROL (MAC) ADDRESSES CHAPTER 3: CYBER STALKING, FRAUD, AND ABUSE HOW INTERNET FRAUD WORKS INVESTMENT OFFERS AUCTION FRAUD IDENTITY THEFT PHISHING CYBER STALKING REAL CYBER STALKING CASES HOW TO EVALUATE CYBER STALKING CRIMES AGAINST CHILDREN LAWS ABOUT INTERNET FRAUD PROTECTING YOURSELF AGAINST CYBERCRIME PROTECTING AGAINST INVESTMENT FRAUD PROTECTING AGAINST IDENTITY THEFT SECURE BROWSER SETTINGS PROTECTING AGAINST AUCTION FRAUD PROTECTING AGAINST ONLINE HARASSMENT CHAPTER 4: DENIAL OF SERVICE ATTACKS ILLUSTRATING AN ATTACK DISTRIBUTED REFLECTION DENIAL OF SERVICE ATTACKS COMMON TOOLS USED FOR DOS ATTACKS LOW ORBIT ION CANNON XOIC TFN AND TFN2K STACHELDRAHT DOS WEAKNESSES SPECIFIC DOS ATTACKS TCP SYN FLOOD ATTACKS SMURF IP ATTACKS UDP FLOOD ATTACKS ICMP FLOOD ATTACKS THE PING OF DEATH TEARDROP ATTACKS DHCP STARVATION HTTP POST DOS ATTACKS PDOS ATTACKS REGISTRATION DOS ATTACKS LOGIN DOS ATTACKS LAND ATTACKS DDOS ATTACKS REAL-WORLD EXAMPLES OF DOS ATTACKS BOSTON GLOBE ATTACK MEMCACHE ATTACKS MYDOOM DDOS BLACKMAIL MIRAI HOW TO DEFEND AGAINST DOS ATTACKS CHAPTER 5: MALWARE VIRUSES HOW A VIRUS SPREADS TYPES OF VIRUSES VIRUS EXAMPLES THE IMPACT OF VIRUSES RULES FOR AVOIDING VIRUSES TROJAN HORSES THE BUFFER-OVERFLOW ATTACK THE SASSER VIRUS/BUFFER OVERFLOW SPYWARE LEGAL USES OF SPYWARE HOW IS SPYWARE DELIVERED TO A TARGET SYSTEM? OBTAINING SPYWARE SOFTWARE OTHER FORMS OF MALWARE ROOTKITS MALICIOUS WEB-BASED CODE LOGIC BOMBS SPAM ADVANCED PERSISTENT THREATS DETECTING AND ELIMINATING VIRUSES AND SPYWARE ANTIVIRUS SOFTWARE REMEDIATION STEPS CHAPTER 6: TECHNIQUES USED BY HACKERS BASIC TERMINOLOGY THE RECONNAISSANCE PHASE PASSIVE SCANNING TECHNIQUES ACTIVE SCANNING TECHNIQUES ACTUAL ATTACKS SQL SCRIPT INJECTION CROSS-SITE SCRIPTING CROSS-SITE REQUEST FORGERY DIRECTORY TRAVERSAL COOKIE POISONING URL HIJACKING WIRELESS ATTACKS CELL PHONE ATTACKS PASSWORD CRACKING MALWARE CREATION WINDOWS HACKING TECHNIQUES PENETRATION TESTING NIST 800-115 THE NSA INFORMATION ASSESSMENT METHODOLOGY PCI PENETRATION TESTING STANDARD THE DARK WEB CHAPTER 7: INDUSTRIAL ESPIONAGE IN CYBERSPACE WHAT IS INDUSTRIAL ESPIONAGE? INFORMATION AS AN ASSET REAL-WORLD EXAMPLES OF INDUSTRIAL ESPIONAGE EXAMPLE 1: HOUSTON ASTROS EXAMPLE 2: UNIVERSITY TRADE SECRETS EXAMPLE 3: NUCLEAR SECRETS EXAMPLE 4: UBER EXAMPLE 5: FOREIGN GOVERNMENTS AND ECONOMIC ESPIONAGE TRENDS IN INDUSTRIAL ESPIONAGE INDUSTRIAL ESPIONAGE AND YOU HOW DOES ESPIONAGE OCCUR? LOW-TECH INDUSTRIAL ESPIONAGE SPYWARE USED IN INDUSTRIAL ESPIONAGE STEGANOGRAPHY USED IN INDUSTRIAL ESPIONAGE PHONE TAPS AND BUGS PROTECTING AGAINST INDUSTRIAL ESPIONAGE THE INDUSTRIAL ESPIONAGE ACT SPEAR PHISHING CHAPTER 8: ENCRYPTION CRYPTOGRAPHY BASICS HISTORY OF ENCRYPTION THE CAESAR CIPHER ATBASH MULTI-ALPHABET SUBSTITUTION RAIL FENCE ENIGMA BINARY OPERATIONS MODERN CRYPTOGRAPHY METHODS SINGLE-KEY (SYMMETRIC) ENCRYPTION MODIFICATION OF SYMMETRIC METHODS PUBLIC KEY (ASYMMETRIC) ENCRYPTION PGP LEGITIMATE VERSUS FRAUDULENT ENCRYPTION METHODS DIGITAL SIGNATURES HASHING MD5 SHA RIPEMD MAC AND HMAC RAINBOW TABLES STEGANOGRAPHY HISTORICAL STEGANOGRAPHY STEGANOGRAPHY METHODS AND TOOLS CRYPTANALYSIS FREQUENCY ANALYSIS MODERN CRYPTANALYSIS METHODS CRYPTOGRAPHY USED ON THE INTERNET QUANTUM COMPUTING CRYPTOGRAPHY CHAPTER 9: COMPUTER SECURITY TECHNOLOGY VIRUS SCANNERS HOW DOES A VIRUS SCANNER WORK? VIRUS-SCANNING TECHNIQUES COMMERCIAL ANTIVIRUS SOFTWARE FIREWALLS BENEFITS AND LIMITATIONS OF FIREWALLS FIREWALL TYPES AND COMPONENTS FIREWALL CONFIGURATIONS COMMERCIAL AND FREE FIREWALL PRODUCTS FIREWALL LOGS ANTISPYWARE IDSS IDS CATEGORIZATION IDENTIFYING AN INTRUSION IDS ELEMENTS SNORT HONEY POTS DATABASE ACTIVITY MONITORING OTHER PREEMPTIVE TECHNIQUES AUTHENTICATION DIGITAL CERTIFICATES SSL/TLS VIRTUAL PRIVATE NETWORKS POINT-TO-POINT TUNNELING PROTOCOL LAYER 2 TUNNELING PROTOCOL IPSEC WI-FI SECURITY WIRED EQUIVALENT PRIVACY WI-FI PROTECTED ACCESS WPA2 WPA3 CHAPTER 10: SECURITY POLICIES WHAT IS A POLICY? ISO 17999 DEFINING USER POLICIES PASSWORDS INTERNET USE EMAIL USAGE INSTALLING/UNINSTALLING SOFTWARE INSTANT MESSAGING DESKTOP CONFIGURATION BRING YOUR OWN DEVICE FINAL THOUGHTS ON USER POLICIES DEFINING SYSTEM ADMINISTRATION POLICIES NEW EMPLOYEES DEPARTING EMPLOYEES CHANGE REQUESTS SECURITY BREACHES VIRUS INFECTION INTRUSION BY A HACKER DEFINING ACCESS CONTROL DEVELOPMENT POLICIES STANDARDS, GUIDELINES, AND PROCEDURES DATA CLASSIFICATION DOD CLEARANCES DISASTER RECOVERY DISASTER RECOVERY PLAN BUSINESS CONTINUITY PLAN IMPACT ANALYSIS DISASTER RECOVERY AND BUSINESS CONTINUITY STANDARDS FAULT TOLERANCE IMPORTANT LAWS HIPAA SARBANES-OXLEY PAYMENT CARD INDUSTRY DATA SECURITY STANDARDS CHAPTER 11: NETWORK SCANNING AND VULNERABILITY SCANNING BASICS OF ASSESSING A SYSTEM PATCH PORTS PROTECT POLICIES PROBE PHYSICAL SECURING COMPUTER SYSTEMS SECURING AN INDIVIDUAL WORKSTATION SECURING A SERVER SECURING A NETWORK SCANNING YOUR NETWORK MBSA NESSUS OWASP ZAP SHODAN GETTING PROFESSIONAL HELP CHAPTER 12: CYBER TERRORISM AND INFORMATION WARFARE ACTUAL CASES OF CYBER TERRORISM THE CHINESE EAGLE UNION CHINA’S ADVANCED PERSISTENT THREAT INDIA AND PAKISTAN RUSSIAN HACKERS WEAPONS OF CYBER WARFARE STUXNET FLAME STOPGEORGIARU MALWARE FINFISHER BLACKENERGY NSA ANT CATALOG ECONOMIC ATTACKS MILITARY OPERATIONS ATTACKS GENERAL ATTACKS SUPERVISORY CONTROL AND DATA ACQUISITIONS (SCADA) INFORMATION WARFARE PROPAGANDA INFORMATION CONTROL DISINFORMATION ACTUAL CASES FUTURE TRENDS POSITIVE TRENDS NEGATIVE TRENDS DEFENSE AGAINST CYBER TERRORISM TERRORIST RECRUITING AND COMMUNICATION TOR AND THE DARK WEB CHAPTER 13: CYBER DETECTIVE GENERAL SEARCHES FACEBOOK COURT RECORDS AND CRIMINAL CHECKS SEX OFFENDER REGISTRIES CIVIL COURT RECORDS OTHER RESOURCES USENET CHAPTER 14: INTRODUCTION TO FORENSICS GENERAL GUIDELINES DON’T TOUCH THE SUSPECT DRIVE IMAGE A DRIVE WITH FORENSIC TOOLKIT CAN YOU EVER CONDUCT FORENSICS ON A LIVE MACHINE? DOCUMENT TRAIL SECURE THE EVIDENCE CHAIN OF CUSTODY FBI FORENSICS GUIDELINES US SECRET SERVICE FORENSICS GUIDELINES EU EVIDENCE GATHERING SCIENTIFIC WORKING GROUP ON DIGITAL EVIDENCE LOCARD’S PRINCIPLE OF TRANSFERENCE TOOLS FINDING EVIDENCE ON THE PC FINDING EVIDENCE IN THE BROWSER FINDING EVIDENCE IN SYSTEM LOGS WINDOWS LOGS LINUX LOGS GETTING BACK DELETED FILES OPERATING SYSTEM UTILITIES NET SESSIONS OPENFILES THE WINDOWS REGISTRY SPECIFIC ENTRIES MOBILE FORENSICS: CELL PHONE CONCEPTS CELL CONCEPTS MODULE CELLULAR NETWORKS IOS ANDROID WINDOWS WHAT YOU SHOULD LOOK FOR THE NEED FOR FORENSIC CERTIFICATION EXPERT WITNESSES FEDERAL RULE 702 DAUBERT ADDITIONAL TYPES OF FORENSICS NETWORK FORENSICS VIRTUAL FORENSICS CHAPTER 15: CYBERSECURITY ENGINEERING DEFINING CYBERSECURITY ENGINEERING CYBERSECURITY AND SYSTEMS ENGINEERING APPLYING ENGINEERING TO CYBERSECURITY SECML SECML CONCEPTS MISUSE CASE DIAGRAM SECURITY SEQUENCE DIAGRAM DATA INTERFACE DIAGRAM SECURITY BLOCK DIAGRAM