CCNA 3 - Capitulo 3.1

CCNA 3 - Capitulo 3.1

1. NETWORK SECURITY CONCEPTS

   • THREAT ACTOR TOOLS
     • ATTACKS TYPES
       • EAVESDROPPING ATTACK
         • CAPTURES AND LISTEN TRAFFIC
         • ALSO REFERRED TO AS SNIFFER OR SNOOPING
       • DATA MODIFICATION ATTACK
         • CAPTURE CAN ALTER DATA
           • WIHOUT KNOWLEDGE OF THE SENDER OR RECEIVER
       • IP ADDRESS SPOOFING ATTACK
         • THREAT ACTOR CONSTRUCTS AN IP PACKET THAT
           • APPERS TO ORIGINATE FROM VALID ADDRES INSIDE CORPORATE
       • PASSWORD-BASED ATTACKS
         • THREAT DISCOVER VALID USER ACCOUNT AS THE REAL USER
           • USE VALID ACCOUNT TO OBTAIN OTHER USERS
           • CHANGE SERVER AND NETWORK CONFIGURATIONS
       • DENIAL OF SERVICE ATTACK
         • FLOOD A COMPUTER - OVERHEAD
           • INCAPACITATED AND NO LONGER CAPABLE OF SUPPORTING REQUESTS FROM LEGITIMATE USER
         • DISRUP NETWORK OPERATIONS
       • MAN-IN-THE-MIDDLE ATTACK
         • POSITIONED THEMSELVES BETWEEN
           • SOURCE AND DESTINATION
         • CAN NOW MONITOR , CAPTURE AND CONTROL COMMUNICATION TRANSPARENTLY
       • COMPROMISED-KEY ATTACK
         • THREAT OBTAIM
           • SECRET KEY
       • SNIFFER ATTACK
         • FULL VIEW OF THE DATA INSED THE PACKET
   • EVOLUTION OF SECURITY TOOLS
     • PENETRATION TEST TOOLS
       • PASSWORD CRACKERS
         • USED TO RECOVER OR CRACK PASSWORDS BY GUESSING OR BYPASSING ENCRYPTION.
           • EXAMPLES: JOHN THE RIPPER, OPHCRACK, THC HYDRA.
       • WIRELESS HACKING TOOLS
         • USED TO TEST WIRELESS NETWORKS FOR SECURITY WEAKNESSES (VULNERABILITIES )
           • EXAMPLES: AIRCRACK-NG, KISMET, NETSTUMBLER.
       • NETWORK SCANNING AND HACKING TOOLS
         • SCAN DEVICES AND HOSTS TO IDENTIFY OPEN TCP/UDP PORTS.
           • EXAMPLES: NMAP, ANGRY IP SCANNER.
       • PACKET CRAFTING TOOLS
         • CREATE CUSTOM PACKETS TO TEST FIREWALL STRENGTH AND NETWORK DEFENSES.
           • EXAMPLES: HPING, SCAPY, NETCAT.
       • PACKET SNIFFERS
         • CAPTURE AND ANALYZE NETWORK TRAFFIC IN LANS AND WLANS.
           • EXAMPLES: WIRESHARK, TCPDUMP, ETTERCAP.
       • ROOTKIT DETECTORS
         • DETECT HIDDEN MALICIOUS SOFTWARE BY CHECKING FILE AND SYSTEM INTEGRITY.
           • EXAMPLES: AIDE, NETFILTER.
       • FUZZERS
         • DISCOVER SECURITY VULNERABILITIES BY SENDING UNEXPECTED OR MALFORMED INPUTS
           • EXAMPLES: SKIPFISH, W3AF.
       • FORENSIC TOOLS
         • USED TO COLLECT AND ANALYZE DIGITAL EVIDENCE.
           • EXAMPLES: SLEUTH KIT, ENCASE, MALTEGO.
       • DEBUGGERS
         • ANALYZE BINARIES AND REVERSE ENGINEER CODE; ALSO USED IN MALWARE ANALYSIS.
           • EXAMPLES: GDB, WINDBG, IDA PRO.
       • HACKING OPERATING SYSTEMS
         • SPECIALIZED OSS PRELOADED WITH SECURITY TESTING TOOLS.
           • EXAMPLES: KALI LINUX, BACKBOX LINUX.
       • HACKING OPERATING SYSTEMS
         • SPECIALIZED OSS PRELOADED WITH SECURITY TESTING TOOLS. EXAMPLES: KALI LINUX, BACKBOX LINUX.
       • ENCRYPTION TOOLS
         • PROTECT DATA USING ENCRYPTION ALGORITHMS TO PREVENT UNAUTHORIZED ACCESS.
           • EXAMPLES: VERACRYPT, OPENSSL, OPENVPN.
       • VULNERABILITY EXPLOITATION TOOLS
         • TEST SYSTEMS FOR EXPLOITABLE SECURITY WEAKNESSES.
           • EXAMPLES: METASPLOIT, SQLMAP.
       • VULNERABILITY SCANNERS
         • SCAN NETWORKS AND SYSTEMS TO DETECT OPEN PORTS AND KNOWN VULNERABILITIES. EXAMPLES: NESSUS, OPENVAS, SAINT.
       • CAN BE COMBINATION OF TOOLS TO CREATE ATTACK
         • MANY THESE TOOLS ARE UNIX OR LINUX ; HAVE A STRONG UNIX AND LINUX BACKGROUND
     • NEW TOOLS REQUIRE LESS TECHNICAL