Distributed Systems Security

Size: px

Start display at page:

Download "Distributed Systems Security"

Quentin Fields
8 years ago
Views:

1 Distributed Systems Security Tutorial Dennis Pfisterer Institute of Telematics, University of Lübeck Non Sequitur by Wiley Security - 08 Firewalls Assessing Your Network Detect potential security problems In order to fix them Detect attacks (attempted or successful) Know what has happened Requires active testing and system audits Security - 04 Cryptology #3 1

de/users/pfisterer Non Sequitur by Wiley Security - 08 Firewalls Assessing Your Network Detect

2 Penetration Testing Evaluate security of a computer system or network Simulate attacks from Malicious outsiders (who do not have an authorized means of accessing systems) Malicious insiders (who have some level of authorized access) Security - 04 Cryptology #4 Legal Issues White Hat hacker Legally attacks systems to find vulnerabilities In cooperation with the owner of the system(s) Black Hat hacker Attacks systems without the owner s consent Security - 04 Cryptology #5 Black Box vs. White Box Testing Black box testing No prior knowledge of the infrastructure to be tested Testers must first determine what systems exists, what they are running, etc. White box testing Testers have complete knowledge of the infrastructure Often includes network diagrams, IP addresses and description of systems, source code Variation: Grey Box Testing (partial information) Security - 04 Cryptology #6 2

hacker Attacks systems without the owner s consent Security - 04 Cryptology #5 Black Box vs.

3 Important Tools Portscanner (nmap, ) Vulnerability Scanner (Nessus, ) Exploit Frameworks (Metasploit,...) Network Sniffer (Wireshark, ) Packet Generators (Hping, Mausezahn, ) Password Cracker (John the Ripper, ) Intrusion Detection System Honeypots Security - 04 Cryptology #7 Example: inssider Security - 04 Cryptology #8 Android: Wifi Analyzer Security - 04 Cryptology #9 3

..) Network Sniffer (Wireshark, ) Packet Generators (Hping, Mausezahn, ) Password Cracker

4 Example: Wireshark Security - 04 Cryptology #10 Example: nmap Ping Scanning (find online systems) : nmap -sp * Security - 08 Firewalls #11 Example: nmap Which operating systems are running? Good to find existing exploits for them nmap -O Security - 08 Firewalls #12 4

* Security - 08 Firewalls #11 Example: nmap Which operating systems are

5 Example: nmap Which services are running (and accessible)? nmap -ss -sv -p Security - 08 Firewalls #13 Example: nmap Issues of scanners Intrusion Detection Systems can trigger alarms Nmap offeres several scanning options Stealth Scan (hard to detect even by modern IDS) Idle Scanning Timing Decoys Security - 08 Firewalls #14 Example: Fiddler2 Security - 04 Cryptology #15 5

trigger alarms Nmap offeres several scanning options Stealth Scan (hard to detect even by modern

6 Example: Metasploit Security - 04 Cryptology #16 Metasploit List all exploits show Search for exploits search dcom Select an exploit (and show its options) More information: m use exploit/windows/dcerpc/ms03_026_dcom show options Set exploit parameter set rhost Select payload (what to do after successful exploit) set payload windows/adduser show options Run exploit exploit Security - 04 Cryptology #17 Intrusion Detection Systeme (IDS) Network IDS (NIDS) Standalone system with a special networking stack Checks packets and data streams for suspicious content Host IDS (HIDS) Installed on certain machines (e.g., important servers) Check for (unauthorized) changes to the system Potential countermeasures on alarms Reconfigure Firewalls/Routers Send alarm to audit logs /SMS to admins Shut down the server (before worse things happen) Security - 08 Firewalls #18 6

_026_dco m use exploit/windows/dcerpc/ms03_026_dcom show options Set exploit parameter set rhost 127.0.0.1 Select payload (what to do after successful exploit) set payload windows/adduser show

7 IDS Software Open Source Snort ( Argus ( Tripwire ( Advanced Intrusion Detection Environment (AIDE) ( Linux Intrusion Detection System (LIDS) ( Commercial Products Tripwire, Tripwire ( Security - 08 Firewalls #19 John the Ripper Test for weak passwords Support for Windows, Linux, MS Office, Outlook, ZIP, RAR, PDF, Wifi,... Example: rm -f test.txt htpasswd -cb test.txt testuser test123 /usr/sbin/john test.txt Security - 04 Cryptology #20 Back Track ( Security - 04 Cryptology #21 7

com) Security - 08 Firewalls #19 John the Ripper Test for weak passwords http://www.openwall.

8 Back Track Contents Metasploit integration RFMON Injection wireless drivers Aircrack-ng Gerix Wifi Cracker Kismet Nmap Ophcrack Ettercap Wireshark Browser Exploitation Framework Hydra OWASP Mantra Security Framework collection of hacking tools, add-ons and scripts based on Firefox Cisco OCS Mass Scanner Information Gathering Vulnerability Assessment Exploitation Tools Privilege Escalation Maintaining Access Reverse Engineering RFID Tools Stress testing Forensics Reporting Tools Services Miscellaneous Security - 04 Cryptology #22 8

scripts based on Firefox Cisco OCS Mass Scanner Information Gathering Vulnerability Assessment Exploitation Tools Privilege

CRYPTUS DIPLOMA IN IT SECURITY

CRYPTUS DIPLOMA IN IT SECURITY 6 MONTHS OF TRAINING ON ETHICAL HACKING & INFORMATION SECURITY COURSE NAME: CRYPTUS 6 MONTHS DIPLOMA IN IT SECURITY Course Description This is the Ethical hacking & Information