network forensics

Page 1

Penetration Testing

Is used to find any weakness in a computer network.

It is a way to attempt (legally) to access resources with no/limited information about the network/computer system

This is used to:

Gather information about the target of possible attacks.

Identify possible entry points.

Attempt to break into the network.

Report back the findings.

Black Box Penetration

Is when the tester are given very little or no information about the system.

This could target email servers, web servers or firewalls.

White Box Penetration

Differs slightly as the tester is given basic information about the networks.

This could include IP addresses, network protocols and maybe passwords.

This gives the tester the identity of an "insider" which could determine how much damage a dishonest or disgruntled employee could do.

Prevention Methods

Automatic software updates (ASU) - if you are using popular software then it may be a target for malware.

Biometric methods - can take many forms and be used for a range of scenarios. They can include fingerprint scanning, voice recognition and retinal (eye) scanning. This is to ensure you are who you say you are. The chance of two people having the same biological characteristics are very small.

CAPTCHA - Completely Automatic Public Turing test to tell Computers and Humans Apart. It checks the user is a human and not a bot. The text that appears on the screen is impossible for a text recognition software to decipher.

Email confirmation - An email is usually sent to your email so that you can confirm that it is you using this email online not somebody else.