Flashcards
Network Security
Cards in this deck (16)
- 1Name the 2 network Threat Models and give examples1. Active Attacks e.g. Packet Sniffing, Traffic Analysis
2. Passive Attacks e.g. Spoofing (phishing), Squatting - 2Discuss IP SecurityIP is connectionless/stateless, offers no delivery/order guarantee.
IPv4 no guaranteed security,
IPv6 IPSec mandatory - 3What are the 2 security mechanisms of IPSec?1. Authentication Header (AH)
2. Encapsulating Security Payload (ESP) - 4What does IPSec not protect against?Traffic analysis
- 5Discuss Transport Mode IPSecTransport Mode encrypts message payload. No header manipulation or traffic analyisis protection.
- 6Discuss Tunnel Mode IPSecTunnel Mode encrypts message payload and header.
Provides header integrity and some traffic analysis protection - 7Name 3 types of network attackARP, DNS and DoS
- 8What is ARP?ARP is an IPv4 protocol, provides IP -> MAC address mappings.
- 9What is ARP Poisoning?Send a host an unrequested ARP reply to poison the ARP cache.
Traffic for a particular IP is then forwarded to the attacker.
M-I-T-M attack - 10How can ARP Poisoning be prevented?By rejecting all unrequested ARP replies
- 11What is DNS Poisoning?Poison the cache of a DNS Resolver to redirect traffic to an attackers server. Achieved through ARP attacks, etc.
- 12How can DNS Poisoning be prevented?Add random query / source ports to DNS requests.
DNSSEC authenticates name servers and ensures message integrity - 13Discuss DoSDenial of Service.
Make a resource unavailable.
Achieved through request flooding.
DDoS uses multiple attackers.
Attack bandwidth vs. Server bandwidth - 14What is an Amplification Attack?Increases DoS attack bandwidth by utilising a particular protocol feature
- 15Give 3 Amplication Attacks1. Smurf and Fraggle: Broadcast ping request, spoofed IP
2. DNS Amplification: Resolve response much larger than query. Spoof IP. Open Resolvers.
3. NTP: Time-sync protocol. 200x amplification - 16Give 2 Low and Slow attacks1. Slow Loris: Start HTTP GET but never finish
2. R-U-Dead-YET?: Start HTTP POST and send tiny amounts of data at a time
Information
- Description
- Bachelors Degree Computer Science (Computer Security) Flashcards on Network Security, created by Alex Neves on 24/05/2016.
- Created by
- Alex Neves
- Views
- 7
- Tags
- Rating