HACK NOTES: NETWORK SECURITY PORTABLE REFERENCE

By V. FATIU

SECURITY PRINCIPLES AND COMPONENTS ASSET AND RISK BASED INFOSEC LIFECYCLE MODEL ARBIL OUTER WHEEL ARBIL INNER WHEEL CONFIDENTIALITY, INTEGRITY, AND AVAILABILITY— THE CIA MODEL CONFIDENTIALITY INTEGRITY AVAILABILITY A GLIMPSE AT THE HACKING PROCESS ATTACK TREES INFORMATION SECURITY THREATS LIST INFOSEC TARGET MODEL VULNERABILITY LIST NETWORK SECURITY SAFEGUARDS AND BEST PRACTICES NETWORK SECURITY BEST PRACTICES SUMMARY INFOSEC RISK ASSESSMENT AND MANAGEMENT RISK MANAGEMENT USING THE SMIRA PROCESS WHAT IS RISK MANAGEMENT? WHAT IS RISK ASSESSMENT? RISK ASSESSMENT COMPONENTS RISK ASSESSMENT TERMINOLOGY AND COMPONENT DEFINITIONS ASSET THREAT THREAT AGENT/ACTOR AND THREAT ACT THREAT INDICATORS VULNERABILITY THREAT CONSEQUENCES IMPACT RISK SAFEGUARDS AND CONTROLS CONDUCTING A RISK ASSESSMENT HACKING CONCEPTS HACKING MODEL RECONNAISSANCE COMPROMISE LEVERAGE TARGETING LIST INFRASTRUCTURE APPLICATION COLLECT AND ASSESS IDENTIFICATION OF THE ENTERPRISE IDENTIFICATION OF REGISTERED DOMAINS IDENTIFICATION OF ADDRESSES SCAN DNS DISCOVERY ICMP SCAN TCP SCAN UDP SCAN ENUMERATE SERVICES ENUMERATION ADVANCED STACK ENUMERATION SOURCE PORT SCANNING APPLICATION ENUMERATION SERVICE ENUMERATION BANNER NUDGES CLIENT CONNECTIONS ATTACK, COMPROMISE, AND ESCALATE UNIX EXPLOITS REMOTE UNIX ATTACKS REMOTE ATTACKS ON INSECURE SERVICES LOCAL UNIX ATTACKS WINDOWS EXPLOITS WINDOWS 9X/ME REMOTE ATTACKS—WINDOWS 9X/ME LOCAL ATTACKS—WINDOWS 9X/ME WINDOWS NT/2000 REMOTE ATTACKS—WINDOWS NT/2000 LOCAL ATTACKS—WINDOWS NATIVE APPLICATION ATTACKS— WINDOWS NT/2000 WIRELESS NETWORK SECURITY WIRELESS NETWORKS OVERVIEW OF 80211 WIRELESS STANDARDS ATTACKING THE WIRELESS ARENA THE FUTURE OF 80211 SECURITY WEB APPLICATION SECURITY A DANGEROUS WEB BEYOND FIREWALLS OVERALL WEB SECURITY SECURING THE SERVERS AND THEIR ENVIRONMENTS SECURING WEB APPLICATIONS CATEGORIES OF WEB APPLICATION SECURITY AUTHENTICATION AUTHORIZATION SESSION MANAGEMENT INPUT PARAMETERS ENCRYPTION MISCELLANEOUS GENERAL WEB APPLICATION ASSESSMENT/HACKING METHODOLOGY COMMON INTRUDER TACTICS SOCIAL ENGINEERING THEY SEEM LEGITIMATE! FINAL THOUGHTS ON SOCIAL ENGINEERING NETWORK SNIFFING—WHAT ARE SNIFFERS? WHY WILL A HACKER USE THEM? COMMONLY USED SNIFFERS HOW DO YOU DETECT SNIFFERS? EXPLOITING SOFTWARE DESIGN AND IMPLEMENTATION FLAWS BUFFERS—WHAT ARE THEY? DEVELOPING THE EXPLOIT CODE FINAL THOUGHTS ON DESIGN AND IMPLEMENTATION FLAWS WAR DIALING AND PBX HACKING OVERVIEW OF SECURITY IMPLICATIONS TYPES OF DIAL-UP SYSTEMS TO PROTECT TOP THREE WAR DIALING TOOLS INCIDENT RESPONSE SIGNS OF BEING HACKED TROJAN HORSE PROGRAMS ROOTKITS IDENTIFYING A COMPROMISE NETWORK USER ACCOUNTS AND USER GROUPS FILE SYSTEMS/VOLUMES AND PROCESSES LOGGING INCIDENT RECOVERY CHECKLIST STAGE ONE: IDENTIFY AND DISABLE STAGE TWO: NOTIFY AND PLAN STAGE THREE: IMPLEMENT COUNTERMEASURES AND HEIGHTEN AWARENESS STAGE FOUR: RECOVER AND REBUILD STAGE FIVE: WRAP UP AND ANALYZE SECURITY ASSESSMENT/HARDENING CHECKLISTS SYSTEM ASSESSMENT AND HARDENING CONCEPTS SYSTEM AND HOST HARDENING METHODOLOGY CHECKLISTS MICROSOFT WINDOWS UNIX WEB SERVER FTP SERVICE DNS MAIL ROUTER WIRED NETWORK WIRELESS NETWORK PHYSICAL SECURITY