CCNA 3 - Capitulo 3.4

CCNA 3 - Capitulo 3.4

1. NETWORK SECURITY CONCEPTS

   • RECONNAISSANCE ATTACK
     • 1.PERFORM AN INFORMATION TARGET QUERY
       • THREAT ACTOR IS LOOKING FOR INITIAL INFORMATION ABOUT TARGET
         • WHOIS
         • GOOGLE SEARCH
         • GOOGLE DORKING
         • NSLOOKUP
     • 4. RUN VULNERABILITY SCANNERS
       • QUERY TO INDETIFIED PORTS TO DETERMINE THE TYPE AND VERSION THE APPLICATION OR OS RUNNING
         • NIPPER
         • SECUNA PSI
         • CORE IMPACT
         • NESSUS V6
         • SAINT
         • OPEN VAS
     • 2. INITIATE A PING SWEEP OF TARGET NETWORK
       • IP ARE ACTIVE
     • 3. INITIATE PORT SCAN OF ACTIVE IP
       • SERVICES ACTIVE
         • SUPERSCAN
         • ANGRY IP SCANNER , NETSCAN TOOLS
         • NETSCAN TOOLS
         • NMAP
     • 5. RUN EXPLOITATION TOOLS
       • THREAT ACTOR ATTEMPTS DISCOVER VULNERABLE SERVICES
         • METALSPLOIT
         • INITIATE
         • SOCIAL ENGINNER TOOLKIT
         • NETSPARKER (DAST)
     • WHATS IS A PURPOSE ?
       • DISCOVERY AND MAPPING SYSTEMS , SERVICES AND VULNERABILITIES

2. DDOS & DOS

   • DENIAL OF SERVICE (DoS)
   • DISTRIBUTED DENIAL OF SERVICE (DDoS)
     • ORIGINATES FROM MULTIPLE , CORDINATED SOURCES
     • NETWORK OF INDECTED HOSTS
     • COMMAND AND CONTROL (CnC)
       • SEND CONTROL MESSAGES TO THE ZOMBIES (BOTNET)
   • WHATS IS PURPOSE ?
     • INTERRUPT OF NETWORK SERVICES
   • TWO MAJOR TYPES OF DoS ATTACKS
     • OVERWHELMIMG QUANTITY TRAFFIC
       • TRANSMISSION AND RESPONSE TO SLOW DOWN ; CRASH DEVICE OR SERVICE
     • MALICIOUSLY FORMATTED PACKETS
       • CAUSES VERY SLOLY OR CRASH