|
Hack the Stack: The 8 Layers of an Insecure Network
Remember the first time someone told you about the OSI model
and described the various layers? It's probably something
you never forgot. This book takes that same layered approach
but applies it to network security in a new and refreshing
way. It guides readers step-by-step through the stack
starting with physical security
and working its way up
through each of the seven OSI layers. Each chapter focuses
on one layer of the stack along with the attacks,
vulnerabilities, and exploits that can be found at that
layer. The book even includes a chapter on the mythical
eighth layer. It's called the people layer. It's included
because security is not just about technology it also
requires interaction with people, policy and office
politics.
This book is designed to offer readers a deeper
understanding of many common vulnerabilities and the ways in
which attacker's exploit, manipulate, misuse, and abuse
protocols and applications. The authors guide the readers
through this process by using tools such as Ethereal
(sniffer) and Snort (IDS). The sniffer is used to help
readers understand how the protocols should work and what
the various attacks are doing to break them. IDS is used to
demonstrate the format of specific signatures and provide
the reader with the skills needed to recognize and detect
attacks when they occur. What makes this book unique is that
it presents the material in a layer by layer approach which
offers the readers a way to learn about exploits in a manner
similar to which they most likely originally learned
networking. This methodology makes this book a useful tool
to not only security professionals but also for networking
professionals, application programmers, and others. All of
the primary protocols such as IP, ICMP, TCP are discussed
but each from a security perspective. The authors convey the
mindset of the attacker by examining how seemingly small
flaws are often the catalyst of potential threats. The book
considers the general kinds of things that may be monitored
that would have alerted users of an attack.
1 Extending OSI to Network Security (20 pp) 2 - Layer 1 Physical layer (30 pp) Introduction Perimeter security Facility security Device security Identification and authentication Biometrics Attacking physical security Lock picks Wiretapping and Scanners Hardware hacking Layer 1 security project Building a one-way data reception cable Summary 3 - Layer 2 - Data Link layer (40 pp) Introduction The Ethernet Frame structure Understanding MAC addressing Understanding PPP and SLIP How a protocol analyzer works Attacking the Data Link Layer Passive versus active sniffing Sniffing Wireless (Wireless basics) Wireless vulnerabilities Defending the Data Link Layer Defenses against active sniffing Detecting promiscuous devices Security in switches Layer 2 security project Using Auditor to crack WEP Summary 4 Layer 3 Network layer (40 pp) Introduction The IP packet structure Attacking the network layer IP Attacks Fragmentation Analyzing an IPID scan The ICMP packet structure Attacking ICMP Smurf Redirects Analyzing the ARP Process Attacking ARP ARP Poisoning Defending the Network Layer Securing IP, ICMP, and ARP Layer 3 security project Fragmenting traffic to bypass an IDS Summary 5 Layer 4 Transport layer (40 pp) Introduction The TCP packet structure Attacking TCP TCP port scanning Advanced port scanning tools Watching Amap in action Using Snort to identify a port scans The UDP datagram Attacking UDP Defending the Transport Layer Watching TLS/SSL Amap and SSL Layer 4 security project Building a Snort system Summary 6 Layer 5 Session layer (40 pp) Introduction Attacking the Session Layer Session hijacking ettercap Observing a SYN attack Sniffing usernames and passwords during a session setup Establishing a session Lophtcrack Dsniff Using ettercap and Hunt Defending the Session Layer Port knocking Layer 5 security project - Building Snort filters to capture malicious traffic Summary 7 Layer 6 Presentation layer (40 pp) Introduction An analysis of the NetBIOS and SMB Attacking the Presentation layer NetBIOS and enumeration Sniffing Kerberos Using BurpProxy to intercept traffic Cracking weak encryption Defending the Presentation Layer Encryption Adding confidentiality and integrity with IPSec Protecting email with S-MIME Layer 6 security project Cracking passwords and other encryption schemes Summary 8 Layer 7 Application layer (40 pp) Introduction The structure of FTP Analyzing DNS and its weaknesses Other insecure applications Attacking the Application layer Web Applications Cross site scripting DNS Spoofing and pharming Buffer Overflow attacks Using Snort to detect a buffer overflow attack Reverse engineering code Using the Exploitation Framework Metasploit Defending the Application Layer SSH PGP Vulnerability scanners Nessus Layer 7 security project Using Nessus to secure the stack Summary 9 Layer 8 The People layer (35 pp) Introduction Attacking the People Layer Social Engineering Person to person and remote attacks Fun with Caller ID spoofing Defending the People Layer Policies, procedures, and guidelines Regulatory Requirements SOX / HIPAA / California law / PIPDA, etc. Making the case for stronger security Building a better stack Layer 8 security project Building an orange box Summary 10 - Appendix A (12 pp) Risk Mitigation Securing the Stack Tying the layers together Defense in depth
|
