CCNA 3 - Capitulo 3.7

CCNA 3 - Capitulo 3.7

1. NETWORK SECURITY CONCEPTS

   • IP SERVICES
     • ARP VULNERABILITIES
       • ARP CACHE POISONING
         • PASSIVE
           • THREAT ACTOR STOLEN INFORMATION CONFIDENTIAL
         • ACTIVE
           • THREAT ACTOR MODIFY DATA IN TRANSIT OR INJECT MALICIOUS DATA
         • MITM
       • ANY CLIENT CAN SEND A UNSOLICITED ARP REPLY CALLED
         • GRATUITOUS ARP
           • OFTEN DONE WHEN A DEVICE FIRST BOOTS UP TO INFORMAL MAC ALL DEVICES IN LAN INTERNAL
           • OTHER HOSTS ON HE SUBNET STORE THE MAC AND IP BINDING IN THEIR ARP TABLES
       • ARP SPOOFING
       • TOOLS
         • DSNIFF , CAIN & ABEL , ETTERCAPP , YERSINIA
     • DNS ATTACKS
       • DNS OPEN RESOLVER
         • DNS SERVICES OF PUBLICLY OPEN DNS SUCH GOOGLE DNS 8.8.8.8
         • DNS RESOLVER VULNERABILITIES
           • DNS CACHE POISONING
             • SPOOFED
               • RECORD RESOURCE (RR)
             • REDIRECT USER LEGITIMATE SITES
               • TO MALICIOUS SITE
           • DNS AMPLIFICATION AND REFLECTION
             • HIDE THE TRUE SOURCE OF AN ATTACK
               • THREAT ACTORES SEND DNS MESSAGES USING THE IP OF A TARGET HOST
           • DNS RESOURCE UTILIZATION
             • CONSUMES RESOURCE DNS OPEN
       • DNS STEALTH ATTACKS
         • FAST FLUX
           • HIDDEN PHISHING E MALWARE
           • QUICKLY-CHANGING NETWORK OF COMPROMISED DNS HOSTS.
           • DNS IP ARE ARE CONTINUOUSLY CHANGED WITHIN MINUTES.
         • DOUBLE GENARATION ALGORITHMS
           • RANDOMLY GENERATE DOMAIN NAME
             • THEN BE USED AS POINT TO THEIR COMMAND AND CONTROL (C&C)
         • HIDE THEIR IDENTITY
         • DOUBLE IP FLUX
           • THREAT ACTOR RAPIDLY CHANGE THE
             • HOSTANAME TO IP MAPPING
             • AUTHORITATIVE NAME
       • DNS DOMAIN SHADOWING ATTACKS
         • GATHERING DOMAIN ACCOUNT CREDNTIALS TO
           • SILENTLY CREATE MULTI SUB-DMAINS
             • SUBDOMAINS TYPICALLY POINT TO MALICIOUS SERVER WITHOUT ALERTING PARENT DOMAIN
       • DNS TUNNELING
         • TUNNELING PLACE NON DNS TRAFFIC WITHIN DNS TRAFFIC
     • DHCP STTACKS
       • DHCP SPOOFING ATTACK
         • WRONG DNS SERVER
           • POITING THE USER TO MALICIOUS WEBSITE
         • WRONG DEFAULT GATEWAY
           • PROVIDES INVALID GATEWAY TO CREATE A MITM ATTACK
         • WRONG IP ADDRESS