Network Security Testing

Network Security Testing

1. Types of Network Tests

   • Penetration testing
   • Network scanning
   • Vulnerability scanning
   • Password cracking
   • Log review
   • Integrity checkers
   • Virus detection

2. Network Testing Tools

   • Nmap/Zenmap
     • Classic TCP and UDP port scanning
     • Classic TCP and UDP port sweeping
     • Stealth TCP and UDP port scans and sweeps
     • Remote operating system identification
   • SuperScan
   • SIEM (Security Information Event Management)
   • GFI LANguard
   • Tripwire
   • Nessus -
   • L0phtCrack
   • Metasploit

3. Security Policy

   • a security policy may include the following
     • Identification and authentication policies
     • Password policies
     • Acceptable use policies
     • Remote access policies
     • Network maintenance policies
     • Incident handling policies

4. Security Policy Hierarchy

   • Governing policy
     • Technical policy
       • General policies -
       • Telephony policy
       • Email and communications policy
       • Remote access policy
       • Network policy
       • Application policy
     • End user policy
       • Identity policy
       • Password policy
       • Antivirus policy

5. Governing Policy

   • includes several areas
     • Statement of the issue that the policy addresses
     • How the policy applies in the environment
     • Roles and responsibilities of those affected by the policy
     • Actions, activities, and processes that are allowed (and not allowed)
     • Consequences of noncompliance