Scribd Logo
Hochladen

Willkommen bei Scribd!

  • Implementing Secure Converged Wide Area Networks (ISCW)

    Hochgeladen von

    Hebert Molina
    39 Ansichten8 Seiten
    Layer 2 attacks review - VLAN hopping - CAM attacks - DHCP starvation - Rogue DHCP - ARP poisoning - IP / MAC spoofing What about layer 3 and above? Packet capture (sniffers) - Ping sweeps - Port scans - DNS queries Access Attacks Used to gain unauthorized access to resources Common methods - Brute force password attacks - Redirection - layer 3 man-in-the-m

    Originalbeschreibung:

    Originaltitel

    Iscw.network.security.1.00

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Verfügbare Formate

    PDF, TXT oder online auf Scribd lesen

    Stufen Sie dieses Dokument als nützlich ein?

    Sind diese Inhalte unangemessen?

    Dieses Dokument melden
    Layer 2 attacks review - VLAN hopping - CAM attacks - DHCP starvation - Rogue DHCP - ARP poisoning - IP / MAC spoofing What about layer 3 and above? Packet capture (sniffers) - Ping sweeps - Port scans - DNS queries Access Attacks Used to gain unauthorized access to resources Common methods - Brute force password attacks - Redirection - layer 3 man-in-the-m

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Als PDF, TXT herunterladen oder online auf Scribd lesen
    Markieren Sie unangemessene Inhalte
    39 Ansichten8 Seiten

    Implementing Secure Converged Wide Area Networks (ISCW)

    Hochgeladen von

    Hebert Molina
    Layer 2 attacks review - VLAN hopping - CAM attacks - DHCP starvation - Rogue DHCP - ARP poisoning - IP / MAC spoofing What about layer 3 and above? Packet capture (sniffers) - Ping sweeps - Port scans - DNS queries Access Attacks Used to gain unauthorized access to resources Common methods - Brute force password attacks - Redirection - layer 3 man-in-the-m

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Als PDF, TXT herunterladen oder online auf Scribd lesen
    Markieren Sie unangemessene Inhalte
    von 8

    www.INE.

    com

    Implementing Secure Converged Wide Area Networks (ISCW) Network Security Strategies & Cisco Device Hardening

    http://www.INE.com

    Attack Mitigation Overview Layer 2 attack review


    VLAN hopping CAM attacks DHCP starvation Rogue DHCP ARP poisoning IP/MAC spoofing

    What about layer 3 and above?

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    www.INE.com

    Reconnaissance Attacks Used to map the network and discover resources


    What are the routers, links, routing tables, hosts, etc.

    Common methods
    Packet capture (sniffers) Ping sweeps Port scans DNS queries
    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Control Plane Attacks Disrupt the routing & management protocols of the network Common methods
    Prefix injection/withdrawal BGP reset Telnet passwords SNMP community strings NTP spoofing

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    www.INE.com

    Access Attacks Used to gain unauthorized access to resources Common methods


    Brute force password attacks Redirection Layer 3 Man-in-the-Middle (MiM)

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    DoS/DDoS Attacks Used to overwhelm links and servers to the point they are unusable Common methods
    IP spoofing Smurf Fraggle TCP SYN flooding

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    www.INE.com

    Application Attacks Targeted at software vulnerabilities Common methods


    Buffer overflows Worms Viruses Trojans etc.

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Reconnaissance Mitigation
    How are they mapping the network in the first place?
    ICMP
    Echo-reply Unreachable Mask reply Redirect

    Proxy ARP CDP

    How to mitigate?
    Disable unneeded services IPS
    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    www.INE.com

    Control Plane Attack Mitigation


    Why is the control vulnerable?
    No routing authentication Promiscuous routing neighbors Clear text telnet & SNMP passwords No NTP authentication Routing authentication Unicast updates SSH SNMPv3 NTP authentication
    Copyright 2009 Internetwork Expert, Inc www.INE.com

    How to mitigate

    Access Attack Mitigation Why is access vulnerable?


    Lenient password retry policy Clear text strings in protocol payloads Hosts vulnerable to redirection

    How to mitigate?
    AAA & lockouts SSL/IPsec HIPS

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    www.INE.com

    DoS/DDoS Attack Mitigation Why are we vulnerable?


    TCP stack connection limits Flood attack amplification Input packets not RPF checked

    How to mitigate
    Half-open session monitoring Disable directed broadcasts RFC 3704 / BOGON / URPF

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Application Attacks Why are we vulnerable?


    Patch application not enforced Virus scan updates not enforced

    How to mitigate?
    NAC

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    www.INE.com

    Disabling Unneeded Services Examples Manually via CLI Auto-secure SDM audit & lockdown

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Securing the Control Plane Examples Passwords, privileges, & AAA Role based CLI Disabling Telnet Enabling SSH Disabling SMNP v1/v2 NTP authentication Logging sequence numbers Banners
    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    www.INE.com

    DoS Mitigation Examples URPF BOGON filtering TCP Intercept / CBAC Disabling directed broadcasts

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Q&A

    Copyright 2009 Internetwork Expert, Inc www.INE.com

    Copyright 2009 Internetwork Expert

    Das könnte Ihnen auch gefallen